My issue was that I was missing a simple "aaa authorization network" command in my config which would allow ISE to move the phone into the voice domain through CoA. Now each device shows up in the correct domain with "authentication host multi-domain...
Something that seems off to me is your auth server dead action is set to authorize vlan 103 which appears to be the vlan for your data domain. I could see that if the switch momentarily loses connectivity with your AAA server, it would fail both devi...
I'm also having this problem. I can confirm that the AV pair device-traffic-class=voice is being issued by ISE and received at the switch. The workstation hits my policy for workstations and the phone hits the Cisco-IP-Phone authorization policy.
I...
