Hi All,
I have the brand new Cisco 1000 switch with the IOS 15.2(7)E1, Normally my company use the MAB for control the devices access to network and our radius server is Cisco ISE.
Below is my switch port configuration that can work well on Cisco 3750, 2960 , 2960x
interface GigabitEthernet1/0/1
switchport mode access
switchport voice vlan 104
authentication control-direction in
authentication host-mode multi-domain
authentication port-control auto
mab
dot1x pae authenticator
dot1x timeout tx-period 1
dot1x max-reauth-req 1
spanning-tree portfast edge
spanning-tree bpduguard enable
And below is the authentication result.
C1000_SW#sh authentication sessions interface g1/0/1 de
Interface: GigabitEthernet1/0/1
MAC Address: 0004.f236.22c8
IPv6 Address: Unknown
IPv4 Address: Unknown
User-Name: 00-04-F2-36-22-C8
Status: Authorized
Domain: VOICE
Oper host mode: multi-domain
Oper control dir: in
Session timeout: N/A
Restart timeout: N/A
Periodic Acct timeout: N/A
Session Uptime: 2263s
Common Session ID: 0AC448B90000001900C75589
Acct Session ID: 0x00000065
Handle: 0x7200000A
Current Policy: POLICY_Gi1/0/1
Local Policies:
Service Template: DEFAULT_LINKSEC_POLICY_SHOULD_SECURE (priority 150)
Server Policies:
Method status list:
Method State
dot1x Stopped
mab Authc Success
Below is the ISE authentication log.
My problem is once I see the communication is completed the IP phone still cannot get the IP address and look like it
cannot communicate to network because I can't see the IP phone MAC on the core switch.
Anyone could you please advice ?
Regard,
MSompong.
