9200 switch constanty change vlan

[OstemETIC]

Hi. Maybe the community will help. I have stacked 9200 switches (C9200L-48P-4X, sw version 17.06.03). Two devices are connected to the port - a voip grandstream phone working with PoE, and a computer (via the built-in bridge). The problem is that the connected grandsream phone keeps changing vlan. Once it is in data vlan, sometimes in Voice. This causes about 2% packet loss. During this time, the computer does not lose its connection. On a different switch model with the same phone model, I do not observe such an error. There is not fully functional authentication, but #authentication open shuld not couse that kind of problem. Have You any suggestion, where could i find a solution ?

[marce1000]

                 - Check logs on the switch when that happens and or post the port-configuration.

 M.

[OstemETIC]

Thanks for reply
Logs give information about failed authentication in 802.1x. But i think that is just an effect, not cause

"Jul 28 11:48:42 switch ip : %DOT1X-5-FAIL: Switch 1 R0/0: sessmgrd: Authentication failed for client (000b.82ba.175f) with reason (No Response from Client) on Interface Gi3/0/22 AuditSessionID 1E66A8C000376DA84434DFBC
Jul 28 11:49:42 switch ip : %DOT1X-5-FAIL: Switch 1 R0/0: sessmgrd: Authentication failed for client (000b.82ba.175f) with reason (No Response from Client) on Interface Gi3/0/22 AuditSessionID 1E66A8C000376E054435CC40
Jul 28 11:50:42 switch ip : %DOT1X-5-FAIL: Switch 1 R0/0: sessmgrd: Authentication failed for client (000b.82ba.175f) with reason (No Response from Client) on Interface Gi3/0/22 AuditSessionID 1E66A8C000376E6D4436B4AC
Jul 28 11:51:42 switch ip : %DOT1X-5-FAIL: Switch 1 R0/0: sessmgrd: Authentication failed for client (000b.82ba.175f) with reason (No Response from Client) on Interface Gi3/0/22 AuditSessionID 1E66A8C000376ECF44379E54
Jul 28 11:52:42 switch ip : %DOT1X-5-FAIL: Switch 1 R0/0: sessmgrd: Authentication failed for client (000b.82ba.175f) with reason (No Response from Client) on Interface Gi3/0/22 AuditSessionID 1E66A8C000376F2844388B28
Jul 28 11:53:42 switch ip : %DOT1X-5-FAIL: Switch 1 R0/0: sessmgrd: Authentication failed for client (000b.82ba.175f) with reason (No Response from Client) on Interface Gi3/0/22 AuditSessionID 1E66A8C000376F8B44397490
Jul 28 11:54:50 switch ip : %DOT1X-5-FAIL: Switch 1 R0/0: sessmgrd: Authentication failed for client (000b.82ba.175f) with reason (No Response from Client) on Interface Gi3/0/22 AuditSessionID 1E66A8C000376FF2443A7EB8
Jul 28 11:55:49 switch ip : %DOT1X-5-FAIL: Switch 1 R0/0: sessmgrd: Authentication failed for client (000b.82ba.175f) with reason (No Response from Client) on Interface Gi3/0/22 AuditSessionID 1E66A8C00037704F443B6658
Jul 28 11:56:49 switch ip : %DOT1X-5-FAIL: Switch 1 R0/0: sessmgrd: Authentication failed for client (000b.82ba.175f) with reason (No Response from Client) on Interface Gi3/0/22 AuditSessionID 1E66A8C0003770AF443C4D18
Jul 28 11:58:55 switch ip : %DOT1X-5-FAIL: Switch 1 R0/0: sessmgrd: Authentication failed for client (000b.82ba.175f) with reason (No Response from Client) on Interface Gi3/0/22 AuditSessionID 1E66A8C000377179443E3AB0
Jul 28 12:00:22 switch ip : %DOT1X-5-FAIL: Switch 1 R0/0: sessmgrd: Authentication failed for client (000b.82ba.175f) with reason (No Response from Client) on Interface Gi3/0/22 AuditSessionID 1E66A8C000377213443F90D0
Jul 28 12:01:52 switch ip : %DOT1X-5-FAIL: Switch 1 R0/0: sessmgrd: Authentication failed for client (000b.82ba.175f) with reason (No Response from Client) on Interface Gi3/0/22 AuditSessionID 1E66A8C00037729A4440EE84

"

Port configuration:
interface GigabitEthernet3/0/22
switchport access vlan xxx
switchport mode access
switchport block unicast
switchport voice vlan xxx
switchport port-security maximum 10
switchport port-security aging time 1
ip arp inspection limit rate 1022
authentication event fail action next-method
authentication host-mode multi-auth
authentication open
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication timer inactivity 30
authentication violation restrict
mab
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
spanning-tree guard loop
end

[marce1000]

  >...%DOT1X-5-FAIL: Switch 1 R0/0: sessmgrd: Authentication failed for client (000b.82ba.175f) with reason (No Response from Client) on Interface Gi3/0/22 AuditSessionID 1E66A8C00037704F443B6658

  Well at least the phone does not get authenticated on the network (or doesn't have  a supplicant), so it's network access is not fully open , hence the vlan swapping because it can not get in the correct vlan. You need to look into that.

 M.

[MHM Cisco World]

instead of

authentication host-mode multi-auth

try in one port 

authentication host-mode multi-domain