IP-phone Domain shows as DATA instead of VOICE

[BigK]

Hello,

Can someone please explain why an IP-phone shows as data instead of VOICE

Device#sho authentication sessions
Interface MAC Address Method Domain Status Fg Session ID
--------------------------------------------------------------------------------------------
Gi1/2   c4b9.cdb5.315e mab DATA Auth 000000000000000BC54A62F3

--------------------------------------------------------------------------------------------

Device#sho cdp  neighbors
Device ID Local Intrfce Holdtme Capability Platform Port ID

SEPC4B9CDB5315e Gig 1/2 138 H P M IP Phone Port 1

----------------------------------------------------------------------------------------------

interface GigabitEthernet1/2
switchport access vlan 10
switchport mode access
switchport voice vlan 50
device-tracking
authentication host-mode multi-domain
authentication open
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
end

Thanks

BigK

[howon · Accepted solution]

You need to send down voice domain permission attribute from ISE for phone MAC address.

[BigK]

@howon 

Thanks !

How did you get there ?

[paul · Accepted solution]

In the authorization profile (Policy->Policy Elements->Results->Authorization->Authorization Profiles) that you are applying to your Cisco IP Phone rule there is a center section called Common Tasks that has its own scroll bar.  If you scroll down just a bit  you will see the Voice Domain checkbox.