Comware

 View Only
  • 1.  Username displayed as anonymous

    Posted Sep 05, 2018 05:39 AM

    Hi Experts,
    We are in the middle of deploying NAC in our environment, we also have a lot of HP 5130 switches running,  7.1.070, Release 3208P03.
    We were able to ingtegrate them successully wih the Cisco NAC solution and but, when I run the command, display dot1x connection, I see that it does not show the username?

    Output:

    Total connections: 1
    Slot ID: 1
    User MAC address: <endpoint_macaddress>
    Access interface: GigabitEthernet1/0/1
    Username: anonymous
    User access state: Successful
    Authentication domain: ciscoise
    Authentication method: EAP
    Initial VLAN: 230
    Authorization untagged VLAN: N/A
    Authorization tagged VLAN list: N/A
    Authorization VSI: N/A
    Authorization ACL ID: 3002
    Authorization user profile: N/A
    Authorization CAR: N/A
    Authorization URL: N/A
    Termination action: Default
    Session timeout period: N/A
    Online from: 2018/09/05 11:04:49
    Online duration: 0h 33m 5s

    Am I missing out any othe config on the switch here?
    Any pointers and assistance much appreciated.



  • 2.  RE: Username displayed as anonymous

    Posted Sep 17, 2018 07:51 AM

    Hi,

    Please provide the port configuration of GigabitEthernet1/0/1.  



  • 3.  RE: Username displayed as anonymous

    Posted Sep 18, 2018 01:32 AM

    Here is the interface configuration:

    interface GigabitEthernetx/x/x
    port link-type hybrid undo
    port hybrid vlan 1 port hybrid
    vlan <access vlan> untagged
    port hybrid pvid vlan <access vlan>
    undo voice-vlan mode auto
    voice-vlan <voice vlan> enable
    mac-vlan enable
    undo stp enable
    stp edged-port
    port bridge enable
    poe enable
    undo dot1x handshake
    dot1x handshake reply enable
    dot1x mandatory-domain ciscoise
    undo dot1x multicast-trigger
    dot1x unicast-trigger
    mac-authentication max-user 5
    mac-authentication domain ciscoise
    mac-authentication timer auth-delay 15
    mac-authentication host-mode multi-vlan
    mac-authentication parallel-with-dot1x
    port-security port-mode userlogin-secure-or-mac-ext