How to authenticate Cisco IP Phones via ISE

[Marco Serato]

Hello

Has anybody an idea or official link to a Cisco instruction, how to configure a Cisco ISE to authenticate Cisco IP Telephony via EAP-TLS (802.1x)?

Can anybody help?

Thanks!

Marco

[Stephen Rodriguez]

HEre you go.

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_auth_pol.html#wp1146222

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

[Marco Serato]

At first thanks for your rapid answer.

I'm looking more for a guide, how to import the certificate from the UCM and where I can config the RADIUS-Attribut "device-traffic-class=voice"?

[Stephen Rodriguez]

Ahh, this isn't for a wireless phone is it......take a look at the below guide

https://supportforums.cisco.com/docs/DOC-22478

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

[Marco Serato]

This are for wired phones that support EAP-TLS.

I read your link and already know this fakts from other manuals.

Now I want to configure the Cisco ISE to authenticate these IP Phones via 802.1x - EAP-TLS.

But I can not find any Cisco guides for solving this problem.

[Stephen Rodriguez]

EAP is EAP. it doesn't matter what the end device is.  So the same config will work for any device that supports EAP-TLS.

That doc tells you what the attributes are that need to be returned

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

[Marco Serato]

Yes ok. So there is no difference between the devices.

Thanks.