Showing results for 
Search instead for 
Did you mean: 

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.


802.1x sticky mac address


We have a problem with 802.1x configuration via IP Phone.

PC (win7 with certificate)-------IP Phone (7911, 9.2.1s firmware)-----switch (2960, lab base 12.2(58)SE2)

Configuration on the port on the switch:

interface FastEthernet0/3

switchport access vlan 699

switchport mode access

switchport voice vlan 746

switchport port-security maximum 2

switchport port-security

switchport port-security mac-address sticky

switchport port-security mac-address sticky 0019.dbdd.42d4

switchport port-security mac-address sticky 001f.ca35.43c4 vlan voice

srr-queue bandwidth share 10 10 60 20

priority-queue out

authentication event fail retry 0 action authorize vlan 357

authentication event server dead action authorize vlan 82

authentication event no-response action authorize vlan 357

authentication event server alive action reinitialize

authentication port-control auto

authentication timer restart 0

mls qos trust device cisco-phone

mls qos trust cos

macro description cisco-phone

dot1x pae authenticator

dot1x timeout tx-period 5

auto qos voip cisco-phone

spanning-tree portfast

spanning-tree bpdufilter enable

spanning-tree bpduguard enable

service-policy input AutoQoS-Police-CiscoPhone

After shutting down the PC, port are moving in the d0t1x unauthorized state, but it is also removing sticky MAC address from the port configuration! Without sticky keyword, with adding static mac address via portsecurity on the port, everything is working fine, but I can not understand why dot1x port state are also removing sticky mac address ?

Most interesting part is that this is not happening if PC is directly connected to the switch, not via IP Phone.

Any idea?

Thank You in advance

Content for Community-Ad