Alcatel Unleashed

Well, if the switch is performing well on a wired port with regards to PEAP - then I don't understand why you question the support of PEAP in the first place.

You may involve the NEC support, but they'll likely ask you for the same thing (a wireshark capture from the client PC behind the phone).

B

Usually the integrated switch in the phones should be transparent, but in your case it is possible that it is not. Are you sure that your 802.1x configuration on the client is ok? I saw many times that with PEAP, you'll need to uncheck "validate server certificate" in the windows configura...

Hi, If you want to go to the RADIUS server for each MAC-Address that you're learning on a switch port, the config has too look like this: 802.1x 3/8 supplicant policy authentication pass vlan 1 block fail block 802.1x 3/8 non-supplicant policy authentication pass group-mobility fail block Here is so...

It would probably help to have a better overview on the type of traffic that is happening. I don't know if you have an sFlow infrastructure in place that could certainly help to identify where this is coming from ...

Best action is to open a ticket with support, I agree.

Benny

Hi Matt, So I do understand correctly that the switches are not under CPU stress? Did you span L2 segments over the WAN? Are you sure that your STP topology is stable? (I'm not talking about the topology age, but the mac-address-table "flush" due to TCNs => search for "stpni_printStat...

Hi Matt, Ok, let me introduce you to Access Guardian 2.0 ... The good news: You can use port ranges You can write templates You can have port groups talk to different radius servers much more that doesn't fit here .. :) The bad: - You'll need to adapt to a new CLI (that imho is better) I encourage y...

Right now it doesn't matter what application is running on top of those devices (voip, printing, whatever) - we want to find out why your network doesn't behave as it should. The configuration you posted for port 3/8 does not go to the Radius server for MAC addresses - This is due to the missing &qu...

Depends on how you send the WOL packets. You can work with ip directed-broadcast or UDP Relay services.

e.g. TT 6348

https://businessportal.alcatel-lucent.c ... =000010459
https://businessportal.alcatel-lucent.c ... =000010826

B

Did you deploy BCAST rate limits?
Does the switch detect DOS events?
Does it look like an ARP scan? (Counting IPs up)

B

The configuration that you posted is incomplete. The OS6250 definitely supports more than one non-supplicant/supplicant per port. Did you configure "aaa authentication mac server1" and "aaa authentication 802.1x server1"? If you just wanted to have group-mobility, then there is n...