Guys,
I am facing a weird problem in the task PEAP (EAP-TLS) using ACS in which i followed all steps in the workbook, but i can see in debugs that thew mac address of my pc is sent as a username and password and not matching the authentication method pki x.509.
Both phone and PC are matching the first rule.
This is the mac address of my phone 00-1A-6D-5C-41-E1 which i configured in internal hosts store and this is the mac address of my PC A4-5D-36-18-C2-43 which is also sent as a username. Here are debugs on the switch:
Switch#debug aaa authen
AAA Authentication debugging is on
Switch#
*Mar 1 01:45:42.643: AAA/BIND(00000042): Bind i/f
*Mar 1 01:45:42.643: %AUTHMGR-5-START: Starting 'mab' for client (a45d.3618.c243) on Interface Fa0/1 AuditSessionID AC1E1FBF000000350060C7F3
*Mar 1 01:45:42.651: AAA/AUTHEN/8021X (00000042): Pick method list 'default'
*Mar 1 01:45:42.651: RADIUS/ENCODE(00000042):Orig. component type = Dot1X
*Mar 1 01:45:42.651: RADIUS: AAA Unsupported Attr: service-type [344] 4 10
*Mar 1 01:45:42.651: RADIUS: AAA Unsupported Attr: audit-session-id [819] 24 59303624
*Mar 1 01:45:42.651: RADIUS: AAA Unsupported Attr: interface [221] 15 59338336
*Mar 1 01:45:42.651: RADIUS(00000042): Config NAS IP: 0.0.0.0
*Mar 1 01:45:42.651: RADIUS(00000042): Config NAS IPv6: ::
*Mar 1 01:45:42.651: RADIUS/ENCODE(00000042): acct_session_id: 56
*Mar 1 01:45:42.651: RADIUS(00000042): sending
*Mar 1 01:45:42.651: RADIUS/ENCODE: Best Local IP-Address 172.30.31.191 for Radius-Server 172.30.31.10
*Mar 1 01:45:42.651: RADIUS(00000042): Sending a IPv4 Radius Packet
*Mar 1 01:45:42.651: RADIUS(00000042): Send Access-Request to 172.30.31.10:1645 id 1645/82,len 157
*Mar 1 01:45:42.651: RADIUS: authenticator D6 BC 46 C3 9A 57 B0 71 - 76 86 8B 9C 43 A1 67 B1
*Mar 1 01:45:42.651: RADIUS: User-Name [1] 14 "a45d3618c243"
*Mar 1 01:45:42.651: RADIUS: User-Password [2] 18 *
*Mar 1 01:45:42.651: RADIUS: Service-Type 
6 Call Check [10]
*Mar 1 01:45:42.651: RADIUS: Framed-MTU [12] 6 1500
*Mar 1 01:45:42.651: RADIUS: Called-Station-Id [30] 19 "00-25-83-6E-0B-81"
*Mar 1 01:45:42.651: RADIUS: Calling-Station-Id [31] 19 "A4-5D-36-18-C2-43"
*Mar 1 01:45:42.651: RADIUS: Message-Authenticato[80] 18
*Mar 1 01:45:42.651: RADIUS: 75 74 FB C4 9D FA E2 A0 2E E5 7A CC 51 EE 13 53 [ ut.zQS]
*Mar 1 01:45:42.651: RADIUS: EAP-Key-Name [102] 2 *
*Mar 1 01:45:42.651: RADIUS: NAS-Port-Type [61] 6 Ethernet [15]
*Mar 1 01:45:42.651: RADIUS: NAS-Port [5] 6 50001
*Mar 1 01:45:42.651: RADIUS: NAS-Port-Id [87] 17 "FastEthernet0/1"
*Mar 1 01:45:42.651: RADIUS: NAS-IP-Address [4] 6 172.30.31.191
*Mar 1 01:45:42.651: RADIUS(00000042): Started 5 sec timeout
*Mar 1 01:45:42.659: RADIUS: Received from id 1645/82 172.30.31.10:1645, Access-Reject, len 38
*Mar 1 01:45:42.659: RADIUS: authenticator 7F 71 1E 70 62 61 85 F7 - 66 B7 37 52 13 79 F4 F1
*Mar 1 01:45:42.659: RADIUS: Message-Authenticato[80] 18
*Mar 1 01:45:42.659: RADIUS: 74 D3 F1 BE E2 53 67 83 AA E9 A9 E9 C8 20 69 E1 [ tSg i]
*Mar 1 01:45:42.659: RADIUS(00000042): Received from id 1645/82
*Mar 1 01:45:42.659: %MAB-5-FAIL: Authentication failed for client (a45d.3618.c243) on Interface Fa0/1 AuditSessionID AC1E1FBF000000350060C7F3
*Mar 1 01:45:42.659: %AUTHMGR-7-RESULT: Authentication result 'no-response' from 'mab' for client (a45d.3618.c243) on Interface Fa0/1 AuditSessionID AC1E1FBF000000350060C7F3
*Mar 1 01:45:42.659: %AUTHMGR-7-FAILOVER: Failing over from 'mab' for client (a45d.3618.c243) on Interface Fa0/1 AuditSessionID AC1E1FBF000000350060C7F3
*Mar 1 01:45:42.659: %AUTHMGR-5-START: Starting 'dot1x' for client (a45d.3618.c243) on Interface Fa0/1 AuditSessionID AC1E1FBF000000350060C7F3
*Mar 1 01:45:47.567: AAA/AUTHEN/8021X (0000002D): Pick method list 'default'
*Mar 1 01:45:47.567: RADIUS/ENCODE(0000002D):Orig. component type = Dot1X
*Mar 1 01:45:47.567: RADIUS: AAA Unsupported Attr: service-type [344] 4 10
*Mar 1 01:45:47.567: RADIUS: AAA Unsupported Attr: audit-session-id [819] 24 59303896
*Mar 1 01:45:47.567: RADIUS: AAA Unsupported Attr: interface [221] 15 59302160
*Mar 1 01:45:47.567: RADIUS(0000002D): Config NAS IP: 0.0.0.0
*Mar 1 01:45:47.567: RADIUS(0000002D): Config NAS IPv6: ::
*Mar 1 01:45:47.567: RADIUS/ENCODE(0000002D): acct_session_id: 35
*Mar 1 01:45:47.567: RADIUS(0000002D): sending
*Mar 1 01:45:47.567: RADIUS/ENCODE: Best Local IP-Address 172.30.31.191 for Radius-Server 172.30.31.10
*Mar 1 01:45:47.567: RADIUS(0000002D): Sending a IPv4 Radius Packet
*Mar 1 01:45:47.567: RADIUS(0000002D): Send Access-Request to 172.30.31.10:1645 id 1645/83,len 157
*Mar 1 01:45:47.567: RADIUS: authenticator 7F BB 89 AD C9 20 14 19 - 5F ED 4E BF 86 7B 07 83
*Mar 1 01:45:47.567: RADIUS: User-Name [1] 14 "001a6d5c41e1"
*Mar 1 01:45:47.567: RADIUS: User-Password [2] 18 *
*Mar 1 01:45:47.567: RADIUS: Service-Type 6 Call Check [10]
*Mar 1 01:45:47.567: RADIUS: Framed-MTU [12] 6 1500
*Mar 1 01:45:47.567: RADIUS: Called-Station-Id [30] 19 "00-25-83-6E-0B-81"
*Mar 1 01:45:47.567: RADIUS: Calling-Station-Id [31] 19 "00-1A-6D-5C-41-E1"
*Mar 1 01:45:47.567: RADIUS: Message-Authenticato[80] 18
*Mar 1 01:45:47.567: RADIUS: 37 3C E6 D0 A3 F7 FD 7A C2 53 60 EA 20 7D 27 FA [ 7<zS` }']
*Mar 1 01:45:47.567: RADIUS: EAP-Key-Name [102] 2 *
*Mar 1 01:45:47.567: RADIUS: NAS-Port-Type [61] 6 Ethernet [15]
*Mar 1 01:45:47.567: RADIUS: NAS-Port [5] 6 50001
*Mar 1 01:45:47.567: RADIUS: NAS-Port-Id [87] 17 "FastEthernet0/1"
*Mar 1 01:45:47.567: RADIUS: NAS-IP-Address [4] 6 172.30.31.191
*Mar 1 01:45:47.567: RADIUS(0000002D): Started 5 sec timeout
*Mar 1 01:45:47.575: RADIUS: Received from id 1645/83 172.30.31.10:1645, Access-Accept, len 116
*Mar 1 01:45:47.575: RADIUS: authenticator 89 F8 82 C0 AD 5C 98 48 - 9E D8 69 84 34 EC 39 84
*Mar 1 01:45:47.575: RADIUS: User-Name [1] 19 "00-1A-6D-5C-41-E1"
*Mar 1 01:45:47.575: RADIUS: Class [25] 25
*Mar 1 01:45:47.575: RADIUS: 43 41 43 53 3A 41 43 53 35 33 2F 31 38 35 31 33 [CACS:ACS53/18513]
*Mar 1 01:45:47.575: RADIUS: 32 35 30 31 2F 38 30 [ 2501/80]
*Mar 1 01:45:47.575: RADIUS: Message-Authenticato[80] 18
*Mar 1 01:45:47.575: RADIUS: 02 F4 8C 78 97 81 DF E9 E1 36 FF E3 A0 67 64 D8 [ x6gd]
*Mar 1 01:45:47.575: RADIUS: Vendor, Cisco [26] 34
*Mar 1 01:45:47.575: RADIUS: Cisco AVpair [1] 28 "device-traffic-class=voice"
*Mar 1 01:45:47.575: RADIUS(0000002D): Received from id 1645/83
Please guide me how to troubleshoot the problem...
Thank you.