11509 Allowed Protocols does not allow any EAP protocols

[mdmujahiduzzaman]

all protocol have been checked. like peap, mab, EAP etc.default protocol has been used. this is multi supplicant where i used ip phone and PC connwcted through one port. below is the sw configuration 

set interfaces ge-0/0/0 unit 0 family ethernet-switching interface-mode access
set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members HO_IT
set interfaces ge-0/0/47 unit 0 family ethernet-switching storm-control user
set protocols dot1x authenticator interface ge-0/0/0.0 authentication-order dot1x
set protocols dot1x authenticator interface ge-0/0/0.0 authentication-order mac-radius
set protocols dot1x authenticator interface ge-0/0/0.0 supplicant multiple
set protocols dot1x authenticator interface ge-0/0/0.0 retries 3
set protocols dot1x authenticator interface ge-0/0/0.0 transmit-period 5
set protocols dot1x authenticator interface ge-0/0/0.0 mac-radius
set protocols dot1x authenticator interface ge-0/0/0.0 reauthentication 3600
set protocols dot1x authenticator interface ge-0/0/0.0 server-timeout 5
set protocols dot1x authenticator interface ge-0/0/0.0 maximum-requests 3
set protocols dot1x authenticator interface ge-0/0/0.0 server-fail use-cache
set protocols dot1x authenticator interface ge-0/0/0.0 server-fail-voip use-cache
set switch-options voip interface ge-0/0/0.0 vlan voice

supplicant also configure in pc. i want ip phone for mab and windows for dot1x. i configured policy in ISE accordingly.

[MHM Cisco World]

Yoh use set command' this not cisco SW i guess?

MHM

[mdmujahiduzzaman]

yes its juniper

[MHM Cisco World]

https://www.juniper.net/documentation/us/en/software/nce/nce-213_ex_and_cisco_ise/topics/topic-map/nce-213-ex-series-switch-cisco-ise.html

Check this 

MHM

[mdmujahiduzzaman]

follow that document but not working. Single supplicant dot1x and mab working.

[MHM Cisco World]

In link I share there is how you config the allow protcol' did you check it ?

 

[mdmujahiduzzaman]

yes checked. issue is same problem. would you tell me ip phone will first authenticate than PC ? or both will authenticate individually ?

[mdmujahiduzzaman · Accepted solution]

solution : configure policy properly