Cisco ISE: No 802.1x authentication for network devices looped via Atcom IP Phones

[Kennedychuka1759]

Hello,

I have Cisco ISE runnining version 1.2.1.198, Client pc's looped via ip phones (Atcom AT810P and AT840P) do not do 802.1x authentication, they failover to MAB, but when i connect the same client pc directly the perform 802.1x authentication

Please help out.

This is the interface configuration

interface range FastEthernet0/1
 switchport access vlan 66
 switchport mode access
 switchport voice vlan 86
 ip access-group ACL-ALLOW in
 authentication event fail action next-method
 authentication event server dead action authorize vlan 66
 authentication event server dead action authorize voice
 authentication event server alive action reinitialize
 authentication host-mode multi-auth
 authentication open
 authentication order dot1x mab
 authentication priority dot1x mab
 authentication port-control auto
 authentication timer reauthenticate server
 authentication violation restrict
 mab
 dot1x pae authenticator
 dot1x timeout tx-period 5
 spanning-tree portfast

[Tim Steele]

I'm not sure about Atcom phones specifically but some IP Phone manufacturers have options with how to handle 802.1X.  You might look at the Atcom docs or open a case with them to discover their options.  You may need to change the phone's config so that it will allow a PC connected to it to perform 802.1X authentication.

[Vivek Ganapathi]

Hi,

This is vendor specific. We had an issue with Avaya & confirmed a fix with Avaya support. So, you may need to reach out to Atcom support.

Regards

Vivek