topic Re: IP-phone Domain shows as DATA instead of VOICE in Network Access Control

IP-phone Domain shows as DATA instead of VOICE

BigK — Thu, 07 Feb 2019 15:53:24 GMT

Hello,

Can someone please explain why an IP-phone shows as data instead of VOICE

Device#sho authentication sessions
Interface MAC Address Method Domain Status Fg Session ID
--------------------------------------------------------------------------------------------
Gi1/2 c4b9.cdb5.315e mab DATA Auth 000000000000000BC54A62F3

--------------------------------------------------------------------------------------------

Device#sho cdp neighbors
Device ID Local Intrfce Holdtme Capability Platform Port ID

SEPC4B9CDB5315e Gig 1/2 138 H P M IP Phone Port 1

----------------------------------------------------------------------------------------------

interface GigabitEthernet1/2
switchport access vlan 10
switchport mode access
switchport voice vlan 50
device-tracking
authentication host-mode multi-domain
authentication open
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
end

Thanks

BigK

Re: IP-phone Domain shows as DATA instead of VOICE

howon — Thu, 07 Feb 2019 16:55:46 GMT

You need to send down voice domain permission attribute from ISE for phone MAC address.

Re: IP-phone Domain shows as DATA instead of VOICE

BigK — Thu, 07 Feb 2019 17:26:11 GMT

@howon

Thanks !

How did you get there ?

Re: IP-phone Domain shows as DATA instead of VOICE

paul — Sat, 09 Feb 2019 17:20:34 GMT

In the authorization profile (Policy->Policy Elements->Results->Authorization->Authorization Profiles) that you are applying to your Cisco IP Phone rule there is a center section called Common Tasks that has its own scroll bar. If you scroll down just a bit you will see the Voice Domain checkbox.