Hello Guys,
we're facing issues with cisco ISE in combination with our Alcatel-Lucent Phones.
When we're apply the default ISE config a couple of phones keeps rebooting.
The problem occuers at different phone types
See the default config below:
on the switch i cannot see anything, the port do'nt goes down. but the phone reboots.
does anyone have the same issue?
aaa new-model
aaa group server tacacs+ Management
server name SAISE01
server name SAISE02
!
aaa group server radius Dot1x-Auth
server name SAISE01
server name SAISE02
!
aaa authentication login default group Management local
aaa authentication dot1x default group Dot1x-Auth
aaa authorization console
aaa authorization exec default group Management local if-authenticated
aaa authorization commands 1 default group Management if-authenticated
aaa authorization commands 15 default group Management if-authenticated
aaa authorization network default group Dot1x-Auth
aaa accounting update periodic 1440
aaa accounting dot1x default start-stop group Dot1x-Auth
!
!
!
!
!
aaa server radius dynamic-author
client 10.23.15.81 server-key 7
client 10.23.15.82 server-key 7
!
aaa session-id common
clock timezone cet 1 0
clock summer-time cet recurring last Sun Mar 2:00 last Sun Oct 3:00
switch 1 provision ws-c2960x-24ps-l
!
!
!
!
!
device-sensor filter-list dhcp list my_dhcp_list
option name host-name
option name class-identifier
option name client-identifier
!
device-sensor filter-list lldp list my_lldp_list
tlv name system-name
tlv name system-description
!
device-sensor filter-list cdp list my_cdp_list
tlv name device-name
tlv name platform-type
device-sensor filter-spec dhcp include list my_dhcp_list
device-sensor filter-spec lldp include list my_lldp_list
device-sensor filter-spec cdp include list my_cdp_list
device-sensor accounting
device-sensor notify all-changes
!
!
ip device tracking probe interval 21600
ip device tracking probe delay 10
!
authentication mac-move permit
dot1x system-auth-control
!
no ip http server
ip http authentication local
ip http secure-server
ip tftp source-interface Loopback0
tacacs server SAISE01
address ipv4 10.23.15.81
key 7
tacacs server SAISE02
address ipv4 10.23.15.82
key 7
!
radius-server attribute 6 on-for-login-auth
radius-server attribute 6 support-multiple
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server attribute 31 mac format ietf upper-case
radius-server attribute 31 send nas-port-detail
!
radius server SAISE01
address ipv4 10.23.15.81 auth-port 1812 acct-port 1813
key 7
!
radius server SAISE02
address ipv4 10.23.15.82 auth-port 1812 acct-port 1813
key 7
