Cisco ISE2.2

[jm.virtual01]

I have noticed some weird issue in ISE with phones. The phones are connected with the Cisco Switch Catalyst 3850. So far now i have seen the MAC address registered as a Static MAC address because it is directly connected with the switch. But on one cisco switch, i found the MAC address of the phone is registered twice on the same switch-port, as a dynamic and as a static.

The phone try to authenticate in data plane as well in the voice plane as well.

Here is the sample output of the sh mac address-table command is as below,

 Vlan Mac Address Type Ports
---- ----------- -------- -----
103 0090.5e15.8985 STATIC Gi1/0/2
203 0090.5e15.8985 DYNAMIC Gi1/0/2

IN this out put the connected end device is different vendor of phone, I have seen this issue with Avaya phone. I can see the MAC address twice on the same interface.

On the switch-port, i have the standard port configuration on all the switches but i am facing the issue with 2 of them switches.

[RaffyLindogan]

Hi JM,

What is the configuration of the host-mode on the interface?

Can you please post the configuration on your switch port.

Also put output of "Show authentication interface"

Can you also,

 1. Clear mac address interface g1/0/2

 2. Switch phones with the phone which doesn't have an issue 

Thanks.

Raffy

[jm.virtual01]

I have Multi-Domain authentication mode on the switch port. I am using this mode as a standard mode for all my switch-ports.

I have already tried by clearing the mac address from the interface but i am seeing the same issue again and again.

I have more than 100 cisco catalyst 3850 switches with the same configuration and IOS code. The switch configuration is same, as well. But I am facing the issue with two switches and i have this problem with the all connected phones on this switch.