Hello Guys,
last week I received a message from a customer that there are problems with network printers since the firmware update to version 3507.
The problem was that it took a long time for a printer to start printing when the printer was in energy-saving mode.
For testing, I had firmly packed a printer into the printer VLAN without authentication and the problem was gone.
After a bit of trial and error and with the help of HPE support, we wereable to find a solution.
I add 2 more entries to the port configuration created by Michel
These are
mac-authentication timer auth-delay 10
and
undo mac-authentication offline-detect enable
interface range GigabitEthernet1/0/1 to GigabitEthernet1/0/48 port link-type hybrid port hybrid vlan 1 untagged mac-vlan enable stp edged-port poe enable undo dot1x handshake undo dot1x multicast-trigger dot1x unicast-trigger dot1x re-authenticate server-unreachable keep-online mac-authentication re-authenticate server-unreachable keep-online mac-authentication timer auth-delay 10 mac-authentication host-mode multi-vlan undo mac-authentication offline-detect enable mac-authentication parallel-with-dot1x port-security port-mode userlogin-secure-or-mac-ext loopback-detection enable vlan 1 to 4094 loopback-detection action shutdown
And so it goes again :D
Have a nice day!
2 Responses
This is a nice catch of the timeout that is happening. Would you mind to share how you have setup the server(s) doing the authentication ?
I.E what is the backend ?
Hello Tommy,
I used a Windows NPS. You can see the details in this post: https://networkguy.de/how-to-use-802-1xmac-auth-and-dynamic-vlan-assignment/