Comware 3 Switches (3Com 4500, 5500, 5500G - H3C S3600, S5600) - EAPOL v2 and v3 being dropped.
Dear All, If anybody still uses any Comware v3 switches anywhere with 802.1X, they had a bug until recently where they would drop and not respond to all EAPOL v2 and v3 in flagrant violation to the 802.1X-2001 specification. These are switches such as: 3Com 4500, 5500 or 5500G series H3C S3600, S5600. Upgrade to 03.03.02p19 (3Com) / R1702P39 (H3C) or later to resolve this. (As of writing, 03.03.02p21 / R1702P42 are the latest.) If you are using any 4210Gs or 4200G still, then you are SOL as there has been no update for them to correct the issue. I had a battle mid last year getting HP to get this fixed. (We are seeing supplicants now using v2 by default so it was causing pain, and in the case of Cisco's AnyConnect, v3.) Regards, Nick
In response to a private email I had asking for clarification, sorry, I meant the 10/100 4210s which run Comware v3, not 4210Gs which run Comware v5... The actual error you will see on such switched with "terminal debugging" enabled along with "debugging dot1x all" you'll see on afflicted devices is: 8021X/8/PACKET:- 1 -Port:2,Received a EAPOL packet. 8021X/8/Error::- 1 -Port:2,Failed to cut ethernet head. Thanks, Nick
Great, hit send by accident with a sentence half constructed. Hopefully you'll get the gist!
participants (1)
-
Nick Lowe