topic Re: Wired ISE question in Network Access Control https://community.cisco.com/t5/network-access-control/wired-ise-question/m-p/3524414#M519477 <HTML><HEAD></HEAD><BODY><P>What do you mean “how the phone is getting authorized?” Have you searched the live log for the phone’s mac address?</P></BODY></HTML> Tue, 28 Nov 2017 16:33:14 GMT gbekmezi-DD 2017-11-28T16:33:14Z Wired ISE question https://community.cisco.com/t5/network-access-control/wired-ise-question/m-p/3524413#M519475 <HTML><HEAD></HEAD><BODY><P>I have a rule in wired MAB called VOIP Phones. I am trying to determine how the phone is getting authorized in</P><P></P><P><IMG alt="WIRED MAB POLICY.GIF" class="image-1 jive-image" src="/legacyfs/online/fusion/113815_WIRED MAB POLICY.GIF" style="height: 110px; width: 620px;" /></P><P>the switchport configuration is below:</P><P>interface GigabitEthernet0/13</P><P> description Dan's Desk1</P><P> switchport access vlan 102</P><P> switchport mode access</P><P> switchport voice vlan 200</P><P> switchport port-security maximum 100</P><P> switchport port-security</P><P> switchport port-security aging time 1</P><P> switchport port-security violation restrict</P><P> switchport port-security aging type inactivity</P><P> no logging event link-status</P><P> authentication event fail action authorize vlan 31</P><P> authentication event server dead action authorize vlan 31</P><P> authentication event no-response action authorize vlan 31</P><P> authentication host-mode multi-host</P><P> authentication order dot1x mab webauth</P><P> authentication priority dot1x mab webauth</P><P> authentication port-control auto</P><P> authentication periodic</P><P> authentication violation protect</P><P> mab</P><P> mls qos trust device cisco-phone</P><P> mls qos trust cos</P><P> dot1x pae authenticator</P><P> dot1x timeout quiet-period 10</P><P> dot1x timeout tx-period 15</P><P> dot1x timeout supp-timeout 7</P><P> spanning-tree portfast</P></BODY></HTML> Tue, 28 Nov 2017 16:18:51 GMT https://community.cisco.com/t5/network-access-control/wired-ise-question/m-p/3524413#M519475 d.worthley 2017-11-28T16:18:51Z Re: Wired ISE question https://community.cisco.com/t5/network-access-control/wired-ise-question/m-p/3524414#M519477 <HTML><HEAD></HEAD><BODY><P>What do you mean “how the phone is getting authorized?” Have you searched the live log for the phone’s mac address?</P></BODY></HTML> Tue, 28 Nov 2017 16:33:14 GMT https://community.cisco.com/t5/network-access-control/wired-ise-question/m-p/3524414#M519477 gbekmezi-DD 2017-11-28T16:33:14Z Re: Wired ISE question https://community.cisco.com/t5/network-access-control/wired-ise-question/m-p/3524415#M519479 <HTML><HEAD></HEAD><BODY><P>The MAC address for the phones does not show up in live logs</P></BODY></HTML> Tue, 28 Nov 2017 16:43:54 GMT https://community.cisco.com/t5/network-access-control/wired-ise-question/m-p/3524415#M519479 d.worthley 2017-11-28T16:43:54Z Re: Wired ISE question https://community.cisco.com/t5/network-access-control/wired-ise-question/m-p/3524416#M519480 <HTML><HEAD></HEAD><BODY><P>ISE utilizes a multitude of methods to profile Cisco IP Phones.&nbsp; DHCP, CDP, LLDP, NMAP, OS, Platform, etc.</P><P></P><P>You can look at the Device Profile Policy to get an idea:</P><P><IMG alt="IP_Phones.PNG" class="image-1 jive-image" src="https://community.cisco.com/legacyfs/online/fusion/113818_IP_Phones.PNG" style="height: 446px; width: 620px;" /></P><P></P><P>To see how each phone is actually being identified and profiled within ISE, you need to look at the <STRONG>Profiled Endpoints Summary</STRONG> by going to <STRONG>Operations &gt; Reports &gt; Endpoints and Users</STRONG> and selecting the report.</P><P></P><P><IMG alt="Profile_Report.PNG" class="jive-image image-2" src="https://community.cisco.com/legacyfs/online/fusion/113822_Profile_Report.PNG" style="height: 262px; width: 620px;" /></P></BODY></HTML> Tue, 28 Nov 2017 17:25:31 GMT https://community.cisco.com/t5/network-access-control/wired-ise-question/m-p/3524416#M519480 Charlie Moreton 2017-11-28T17:25:31Z Re: Wired ISE question https://community.cisco.com/t5/network-access-control/wired-ise-question/m-p/3524417#M519482 <HTML><HEAD></HEAD><BODY><P>Thanks.&nbsp; That helps </P></BODY></HTML> Tue, 28 Nov 2017 18:40:53 GMT https://community.cisco.com/t5/network-access-control/wired-ise-question/m-p/3524417#M519482 d.worthley 2017-11-28T18:40:53Z