Symptom

MAB for device is failing with following error: *Oct 7 12:33:41.221: %SESSION_MGR-5-FAIL: Switch 1 R0/0: sessmgrd: Authorization failed or unapplied for client (a46c.2a28.1568) on Interface GigabitEthernet1/0/2 AuditSessionID AB246A0A00000016A6359804. Failure reason: Authc fail. Authc failure reason: Missing Config. Switch# Switch#show auth se int g1/0/2 details Interface: GigabitEthernet1/0/2 IIF-ID: 0x1EB04FF8 MAC Address: a46c.2a28.1568 IPv6 Address: Unknown IPv4 Address: Unknown Status: Unauthorized Domain: UNKNOWN Oper host mode: multi-auth Oper control dir: both Session timeout: N/A Common Session ID: AB246A0A00000016A6359804 Acct Session ID: Unknown Handle: 0xd900000c Current Policy: PORT-AUTH-POLICY Server Policies: Method status list: Method State dot1x Stopped mab Authc Failed

Conditions

Interface is configured with template and MAB is not seen in PORT-AUTH-TEMPLATE after a shut and no shut operation. interface GigabitEthernet1/0/2 device-tracking attach-policy IPDT_POLICY source template PORT-AUTH-TEMPLATE template PORT-AUTH-TEMPLATE spanning-tree portfast dot1x pae authenticator dot1x timeout tx-period 7 dot1x max-reauth-req 3 switchport access vlan 70 switchport mode access switchport voice vlan 44 access-session closed access-session port-control auto authentication periodic authentication timer reauthenticate server service-policy type control subscriber PORT-AUTH-POLICY description ** DOT1X Enabled Port ** source template PORT-AUTH-TEMPLATE

Workaround

Add MAB to PORT-AUTH-TEMPLATE or don't use port-template.

Further Problem Description