Page 1 of 1
802.1x and Printer Sleep Mode
Posted: 13 Dec 2010 05:48
by Happy
Hi,
I've a little problem with printers going into sleep mode. My Printers VLAN is assigned by a Radius server i.e. VLANs are mobile on the 6400. This works fantastically with PCs, IP Phones, and Printers but Printers going into sleep mode (powersafe mode) loose their VLAN on the respective Switch Port. Is anybody here who has the same Problem? Some kind of strange behavior of the network card?
Any idea to handle this problem?
Re: 802.1x and Printer Sleep Mode
Posted: 22 Dec 2010 10:59
by cedric1
hello
You have to :
1)- if returned vlan is for exemple 1006 for your printer :
you need to enter this command on all port or port where you connect printer (more specific)
vlan 1006 port slot/port
this will send arp request to vlan printer, even if printer sleep and is back in default "no acces vlan".
2)- change your setting in 802.1x port enforcement from both to in (default timer I have set in my envirronement)
(with theses custom timers, non-supp don't fail in a state "dhcp-failure" because switch try a too long time eap check)
802.1x 14/19 direction in port-control auto quiet-period 5 tx-period 5 supp-timeout 10 server-timeout 30 max-req 2 re-authperiod 3600 no reauthentication
in this case port will get arp request because enforcement is in and not both !!
rgds
I encounter the same issue as you, but now all is fine by me
To tes, make 2 pings and I so I wake printer, printer auth mac against Radius, got vlan (or unp profile in my case) and ping is ok
Cedric
Re: 802.1x and Printer Sleep Mode
Posted: 27 Dec 2010 08:17
by Happy
Big thx Cedric, this seams to solve my problem.
vlan 1006 port 1/2 already solved the problem for printers, the second modification will be done asap on the 802.1x
Re: 802.1x and Printer Sleep Mode
Posted: 29 Dec 2010 05:25
by cedric1
hello
this is a good news ...
Re: 802.1x and Printer Sleep Mode
Posted: 10 Feb 2011 08:39
by devnull
vlan 1006 port slot/port
wouldn't that put the default vlan to 1006? that means i loose this fanzy "connect anywhere - thanks to 802.1x it will get the right vlan" thingi, that is so beautifukl with 802.1x right? (i mean i have to do it to all ports where a printer is.. so i can disable the printer and only tag the vlan...)
Still have to undertstand the second solution..
Re: 802.1x and Printer Sleep Mode
Posted: 10 Feb 2011 13:21
by cedric1
hello
vlan 1006 port 1/6 say "send on port 1/6 arp request for vlan 1006 even if port 1/6 is not learned on vlan 1006)
Why :
1- you connect a printer on port 1/6, printer is authenticated via non-supplicant rule to vlan 1006
-> all is fine
2- Printer enter in sleep mode (mac aging time pass, mac is flushed from port 1/6)
3- A user try to print ... but printer is no more in vlan 1006
3.1 - switch send arp request because of user print request
3.2 - arp request on vlan 1006 is send to port 1/6 (even port is not in vlan 1006 -> thanks to cmd vlan 1006 port 1/6)
3.3 printer wake up, mac auth occur, port 1006 ( better to say mac of printer) is send to vlan 1006
3.4 all are happy
point 2 : with command 802.1x 14/19 direction in
you permit arp packet to be send out of port 1/6 even this port is not authenticated success state (because printer is sleeping )
Rgds
Cedric