Cisco ISE 2.4 with Cisco Phones

[thilinar8]

Hi,

we are in a process of deploying ISE for the organization. recently, we have been told that, we need plus licenses for Cisco Phones to do 802.1X.

01. Why do we need special profiling when Phone can initiate 802.1x session

02. why can't we use CAPF/LSC/MSC on any cert to the authentication?

could you please show me the correct direction.

Thanks

[Francesco Molino]

Hi
If you want to do dot1x authentication based on certificates, you don't need plus licenses.
If you want to profile phones devices to push the voice domain then you'll need plus licenses.
However, you can push an authorization based on certificates info to push the right authorization with voice class domain.