cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
177
Views
0
Helpful
4
Replies
Highlighted
Beginner

IP phone with MAB on Cisco 1000 series

Hi All,

I have the brand new Cisco 1000 switch with the IOS 15.2(7)E1, Normally my company use the MAB for control the devices access to network and our radius server is Cisco ISE.

Below is my switch port configuration that can work well on Cisco 3750, 2960 , 2960x 

 

interface GigabitEthernet1/0/1
switchport mode access
switchport voice vlan 104
authentication control-direction in
authentication host-mode multi-domain
authentication port-control auto
mab
dot1x pae authenticator
dot1x timeout tx-period 1
dot1x max-reauth-req 1
spanning-tree portfast edge
spanning-tree bpduguard enable

And below is the authentication result.

C1000_SW#sh authentication sessions interface g1/0/1 de
Interface: GigabitEthernet1/0/1
MAC Address: 0004.f236.22c8
IPv6 Address: Unknown
IPv4 Address: Unknown
User-Name: 00-04-F2-36-22-C8
Status: Authorized
Domain: VOICE
Oper host mode: multi-domain
Oper control dir: in
Session timeout: N/A
Restart timeout: N/A
Periodic Acct timeout: N/A
Session Uptime: 2263s
Common Session ID: 0AC448B90000001900C75589
Acct Session ID: 0x00000065
Handle: 0x7200000A
Current Policy: POLICY_Gi1/0/1

Local Policies:
Service Template: DEFAULT_LINKSEC_POLICY_SHOULD_SECURE (priority 150)

Server Policies:


Method status list:
Method State

dot1x Stopped
mab Authc Success

 

Below is the ISE authentication log.

2021-01-20 17_46_17-Identity Services Engine.png

My problem is once I see the communication is completed the IP phone still cannot get the IP address and look like it

cannot communicate to network because I can't see the IP phone MAC on the core switch.

Anyone could you please advice ?

 

Regard,

MSompong.  

4 REPLIES 4
Highlighted
VIP Advisor

 

     - On the first ISE authentication log-entry hoover or press on the details icon and show us the result.

 M.

Highlighted

Hi Marce 1000,

Please see below.

1.png2.png3.png4.png5.png6.png

Highlighted

 

   - What ISE version are you using ?

 M.

Highlighted

Hi Marce1000,

 

It working fine now after upgrade to the latest IOS version.

Thank you.

Content for Community-Ad