Hello everybody,
we use 802.1x to authenticate our telephones and also the devices that are connected to the telephones. (Notebooks, PCs and so on)
The problem is, if I unplug the end device, the session remains authenticated and I can no longer use the endevice on any other port.
Even after 2 Days the Session remains authenticated and the cam table does not change either.
If I assign the parameter "authentication timer inactivity 30" on the switchport then it works. But since we also use Meraki switches, this is not a suitable workaround. Furthermore, I set the reauthentication timer to 30 in the authorization profile on the ISE as a test. Unfortunately without success
The devices are connected as follows:
Switch Port -> Avaya telephone -> Notebook
I am sure this is config related.
Maybe one or the other already had this problem and has a flash of inspiration for me
Port Configuration
description VOIP/PC
switchport mode access
switchport nonegotiate
switchport voice vlan 220
switchport port-security maximum 10
switchport port-security
switchport port-security aging time 2
switchport port-security violation restrict
switchport port-security aging type inactivity
authentication host-mode multi-auth
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication violation restrict
mab
dot1x pae authenticator
dot1x timeout tx-period 5
no cdp enable
spanning-tree portfast edge
spanning-tree bpduguard enable
Best regards
