802.1X wired IP-Phone + Computer authentication

ezzaariyouness — Sun, 01 May 2022 18:45:08 GMT

hi everyone ,

I'm running 802.1X on wired with Cisco ISE , I'm using template on switch to authenticate Computer and IP-Phone , so IPPhone get authenticated and Computer failed and match MAP Policy on ISE .

Find below the config that I'm using

class-map type control subscriber match-any AAA-DOWN
match result-type aaa-timeout
class-map type control subscriber match-all DOT1X-FAILED
match method dot1x
match result-type method dot1x authoritative

policy-map type control subscriber DOT1X-DEFAULT
event session-started match-all
10 class always do-all
10 authenticate using dot1x priority 10
20 authenticate using mab priority 20
event violation match-all
10 class always do-all
10 restrict
event agent-found match-all
10 class always do-all
10 authenticate using dot1x
event authentication-failure match-all
10 class AAA-DOWN do-all
10 authorize
20 activate service-template CRITICAL
30 terminate dot1x
40 terminate mab
20 class DOT1X-FAILED do-all
10 authenticate using mab

____________________

template port-auth-Laptop-IPPhone
dot1x timeout tx-period 7
dot1x max-reauth-req 3
spanning-tree portfast
spanning-tree bpduguard enable
switchport access vlan 101
switchport mode access
switchport voice vlan 100
device-tracking attach-policy IPDT_POLICY
mab
access-session host-mode multi-domain
access-session port-control auto
authentication periodic
authentication timer reauthenticate server
service-policy type control subscriber DOT1X-DEFAULT
description User Desktop + Phone

----------------

interface GigabitEthernet1/0/33
ip access-group IPV4_PRE_AUTH_ACL in
source template port-auth-Laptop-IPPhone
spanning-tree portfast

please help me fix this issus .

Re: 802.1X wired IP-Phone + Computer authentication

MHM Cisco World — Sun, 01 May 2022 18:54:25 GMT

can you more elaborate what is issue here ?

Re: 802.1X wired IP-Phone + Computer authentication

ezzaariyouness — Sun, 08 May 2022 18:57:23 GMT

Hi ;

I did solve the issue , may issue that I was not able to authenticate Laptop and mac on the same Port .

topic Re: 802.1X wired IP-Phone + Computer authentication in Network Access Control

802.1X wired IP-Phone + Computer authentication

Re: 802.1X wired IP-Phone + Computer authentication

Re: 802.1X wired IP-Phone + Computer authentication