cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
920
Views
0
Helpful
3
Replies

Cisco ISE profiling Issue

IMG USA
Beginner
Beginner

Hi All,

We are using ISE v2.2 for radius authentication of endpoints. Everything is working fine. Except in one Switch where Cisco VOIP 3905 is used. These devices are not authenticating with ISE and taking the Data domain instead of voice. By statically adding the VOIP mac in the IP-Phone group in ISE, It is working fine. Kindly help on this.

Annotation.jpgVOIP modelVOIP model

3 Replies 3

Muhammad Awais Khan
Cisco Employee
Cisco Employee

Hi,

 

On the switch access port which is connected to phoneport, what authentication mode you are using ? The recomended mode to use phone and data together in same port is multi-domain.

 

Interface gi0/x

Authentication host-mode multi-domain

 

Multi-domain—While in this mode, the authenticator will allow one host from the data domain and one from the voice domain; this is a typical configuration on switchports with IP phones connected.

Damien Miller
VIP Advisor VIP Advisor
VIP Advisor

A few things to check.
Is the phone showing up in the cdp neighbors?  
Are you using the radius device sensor for profiling?
Are the correct profiling attributes showing up in the device sensor cache? 

Jason Kunst
Cisco Employee
Cisco Employee

@IMG USA wrote:

Hi All,

We are using ISE v2.2 for radius authentication of endpoints. Everything is working fine. Except in one Switch where Cisco VOIP 3905 is used. These devices are not authenticating with ISE and taking the Data domain instead of voice. By statically adding the VOIP mac in the IP-Phone group in ISE, It is working fine. Kindly help on this.

Annotation.jpgVOIP modelVOIP model


Did you check the prescriptive wired guide

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers