cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Join Customer Connection to register!
197
Views
0
Helpful
4
Replies
msompong1
Beginner

IP phone with MAB on Cisco 1000 series

Hi All,

I have the brand new Cisco 1000 switch with the IOS 15.2(7)E1, Normally my company use the MAB for control the devices access to network and our radius server is Cisco ISE.

Below is my switch port configuration that can work well on Cisco 3750, 2960 , 2960x 

 

interface GigabitEthernet1/0/1
switchport mode access
switchport voice vlan 104
authentication control-direction in
authentication host-mode multi-domain
authentication port-control auto
mab
dot1x pae authenticator
dot1x timeout tx-period 1
dot1x max-reauth-req 1
spanning-tree portfast edge
spanning-tree bpduguard enable

And below is the authentication result.

C1000_SW#sh authentication sessions interface g1/0/1 de
Interface: GigabitEthernet1/0/1
MAC Address: 0004.f236.22c8
IPv6 Address: Unknown
IPv4 Address: Unknown
User-Name: 00-04-F2-36-22-C8
Status: Authorized
Domain: VOICE
Oper host mode: multi-domain
Oper control dir: in
Session timeout: N/A
Restart timeout: N/A
Periodic Acct timeout: N/A
Session Uptime: 2263s
Common Session ID: 0AC448B90000001900C75589
Acct Session ID: 0x00000065
Handle: 0x7200000A
Current Policy: POLICY_Gi1/0/1

Local Policies:
Service Template: DEFAULT_LINKSEC_POLICY_SHOULD_SECURE (priority 150)

Server Policies:


Method status list:
Method State

dot1x Stopped
mab Authc Success

 

Below is the ISE authentication log.

2021-01-20 17_46_17-Identity Services Engine.png

My problem is once I see the communication is completed the IP phone still cannot get the IP address and look like it

cannot communicate to network because I can't see the IP phone MAC on the core switch.

Anyone could you please advice ?

 

Regard,

MSompong.  

4 REPLIES 4
marce1000
VIP Advisor

 

     - On the first ISE authentication log-entry hoover or press on the details icon and show us the result.

 M.

Hi Marce 1000,

Please see below.

1.png2.png3.png4.png5.png6.png

 

   - What ISE version are you using ?

 M.

Hi Marce1000,

 

It working fine now after upgrade to the latest IOS version.

Thank you.