Cisco IP 7965 not receiving DHCP reply

[DarkRavin]

I am having a issue with a Cisco IP 7965 phone.  The phone was working but went down a few weeks ago and shows on the screen configuring IP.   So I tried bumping the port.  But phone stays on configuring IP.  Checked  the switch and call manger, looks right.  I moved the phone to a known good port still doesn't come up.  Move the phone to a new switch and it comes right up. 

I copied the building switch's running config that the phone is not working on and applied it to a test switch.  The test switch is same model switch and is running same IOS and running config.  The phone comes up on the test switch, but not the building switch.  I decided to watch the ports on wireshark and found on the test switch, the phone gets a reply from the DHCP  the moment it sends a request.  On the main building switch the phone request the DHCP, but the DHCP never answers back.   I have tried to set the phone as a static IP and configured it so.  But again does not come up on the building switch, but will come up on the test switch.  No other phones are having a issue on the building switch.

The two switches are connected to our core ITN a 6500 switch.

Buidling and test switches are 3750x's

IOS:c3750e-universalk9-mz.152-1.E3.bin

Ports are setup as:

interface GigabitEthernet1/0/20
 description \\Problem_phone\\
 switchport access vlan 666
 switchport mode access
 switchport voice vlan 665
 duplex full
 authentication host-mode multi-domain
 authentication order mab
 authentication priority dot1x mab
 authentication port-control auto
 authentication periodic
 authentication timer reauthenticate 1800
 mab
 mls qos trust dscp
 spanning-tree portfast
 spanning-tree bpduguard enable

[Carlo Poggiarelli]

Hi.

Please connect the Phone to building switch and execute a show mac address-table interface GigabitEthernet1/0/20 and post the output?

Thanks

Regards

Carlo

[DarkRavin]

Phone is back on the building switch.

sh mac address-table interface shows:

 Mac Address Table
-------------------------------------------

Vlan    Mac Address          Type                 Ports
------    --------------------       --------------       -------
 665    fc99.47XX.XXXX    DYNAMIC       Drop
Total Mac Addresses for this criterion: 1

[Carlo Poggiarelli]

Hi.

Your switch is dropping the phone's mac most probably because of your dot1x authentication.

Please try to remove that config from that port and try again.

HTH

Regards

Carlo

[DarkRavin]

Configured the port as:

interface GigabitEthernet1/0/20
 description \\Problem_phone\\
 switchport mode access
 switchport voice vlan XX4
 duplex full
 mls qos trust dscp
 spanning-tree portfast
 spanning-tree bpduguard enable

Did a shut, no shut.  Phone powered up and still stuck on configure IP.  An the show mac shows it going into Vlan 1 instead of the voice vlan I assigned it.

Vlan    Mac Address          Type              Ports
------    ----------------------     -------------      ---------
   1      fc99.47XX.XXXX    DYNAMIC     Gi1/0/20

Total Mac Addresses for this criterion: 1

[Carlo Poggiarelli]

Hi.

The cause of this could be cdp disabled globally can you issue a show cdp neighbors to see if the switch is discovering the phone?

Thanks

Regards

Carlo

[DarkRavin]

-------------------------
Device ID: SEPFC9947XXXXXX
Entry address(es):
Platform: Cisco IP Phone 7965,  Capabilities: Host Phone Two-port Mac Relay
Interface: GigabitEthernet1/0/20,  Port ID (outgoing port): Port 1
Holdtime : 168 sec
Second Port Status: Down

Version :
SCCP45.9-4-2-1S

advertisement version: 2
Duplex: full
Power drawn: 12.000 Watts
Power request id: 5586, Power management id: 3
Power request levels are:12000 0 0 0 0
Management address(es):

-------------------------

[DarkRavin]

Came back in, phone still on configuring IP.  Took a look at the port and this is what it looked like.  I changed the switchport voice vlan to switchport access vlan.  But assigned it the voip vlan number and the phone came up.

Phone down:

interface GigabitEthernet1/0/20
 description //Problem_Phone//
 switchport mode access
 switchport voice vlan XX4
 duplex full
 mls qos trust dscp
 spanning-tree portfast
 spanning-tree bpduguard enable

Phone up:

 interface GigabitEthernet1/0/20
 description //Problem_Phone//
 switchport access vlan XX4
 switchport mode access
 duplex full
 mls qos trust dscp
 spanning-tree portfast
 spanning-tree bpduguard enable

[Carlo Poggiarelli]

Hi.

The reason of this behaviour is because vlan has been manually changed on the phone.

Please check it or do an hard reset.

Please let me know 

Regards

Carlo

[DarkRavin]

Did a hard rest on the phone just to see if it would come up.  Upgrades and comes up no problem.   No manual changes to the phone were made. 

Phone drops if we change, switchport access vlan XX4 back to the voice setting of switchport Voice vlan XX4. 

[Carlo Poggiarelli]

Hi.

Please restore the original config on switch port with voice vlan.

Plug in the ip phone and please send me the output of what follows:

show cdp nei  int GigabitEthernet1/0/20 detail

show spanning-tree interface  GigabitEthernet1/0/20 detail

show interface  GigabitEthernet1/0/20 switchport 

If is possible, when the phone is up, send me a screenshot of this url 

http://<IP Phone IP Address>/NetworkConfiguration

Thanks

Regards

Carlo

[DarkRavin]

Port is configured back to old switch setting.  The 7965 is back to configuring IP.

 switchport access vlan 666
 switchport mode access
 switchport voice vlan 665
 duplex full
 authentication host-mode multi-domain
 authentication order mab
 authentication priority dot1x mab
 authentication port-control auto
 authentication periodic
 authentication timer reauthenticate 1800
 mab
 mls qos trust dscp
 spanning-tree portfast
 spanning-tree bpduguard enable

#sh cdp neighbors gigabitEthernet 1/0/20 d
-------------------------
Device ID: SEPFC9947XXXXXX
Entry address(es):
Platform: Cisco IP Phone 7965,  Capabilities: Host Phone Two-port Mac Relay
Interface: GigabitEthernet1/0/20,  Port ID (outgoing port): Port 1
Holdtime : 129 sec
Second Port Status: Down

Version :
SCCP45.9-4-2-1S

advertisement version: 2
Duplex: full
Power drawn: 12.000 Watts
Power request id: 5586, Power management id: 2
Power request levels are:12000 0 0 0 0
Management address(es):

#sh spanning-tree interface gigabitEthernet 1/0/20 d
no spanning tree info available for GigabitEthernet1/0/20

#sh interfaces gigabitEthernet 1/0/20 switchport
Name: Gi1/0/20
Switchport: Enabled
Administrative Mode: static access
Operational Mode: static access
Administrative Trunking Encapsulation: negotiate
Operational Trunking Encapsulation: native
Negotiation of Trunking: Off
Access Mode VLAN: 666 (DEAD_ACCESS_VLAN)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Voice VLAN: 665 (DEAD_VoIP_VLAN)
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk Native VLAN tagging: enabled
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk associations: none
Administrative private-vlan trunk mappings: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL

Protected: false
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none

[Carlo Poggiarelli]

Sorry I forgot to mention to remove dot1x config for that port.

Thanks

Carlo

[DarkRavin]

This is the config that works if I change the voice to access.  Right now the phone is configuring IP.

interface GigabitEthernet1/0/20
 description //Problem_Phone//
 switchport mode access
 switchport voice vlan XX4
 duplex full
 mls qos trust dscp
 spanning-tree portfast
 spanning-tree bpduguard enable

#sh cdp neighbors gigabitEthernet 1/0/20 d
-------------------------
Device ID: SEPFC9947XXXXXX
Entry address(es):
Platform: Cisco IP Phone 7965,  Capabilities: Host Phone Two-port Mac Relay
Interface: GigabitEthernet1/0/20,  Port ID (outgoing port): Port 1
Holdtime : 165 sec
Second Port Status: Down

Version :
SCCP45.9-4-2-1S

advertisement version: 2
Duplex: full
Power drawn: 12.000 Watts
Power request id: 5586, Power management id: 3
Power request levels are:12000 0 0 0 0
Management address(es):

#show spanning-tree interface gigabitEthernet 1/0/20

Vlan                Role Sts Cost      Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
VLAN0001            Desg FWD 19        128.13   P2p Edge
VLAN0XX4            Desg FWD 19        128.13   P2p Edge

#sh interfaces gigabitEthernet 1/0/20 switchport
Name: Gi1/0/20
Switchport: Enabled
Administrative Mode: static access
Operational Mode: static access
Administrative Trunking Encapsulation: negotiate
Operational Trunking Encapsulation: native
Negotiation of Trunking: Off
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Voice VLAN: XX4 (VoIP_VLAN)
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk Native VLAN tagging: enabled
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk associations: none
Administrative private-vlan trunk mappings: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL

Protected: false
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none

[Carlo Poggiarelli]

Hi.

Please try to configure a trunk on that port:

interface Gi1/0/20

switch port mode trunk

switchport trunk allowed vlan XX4

See if the phone receives the ip address with that config.

Regards

Carlo