7925 MAB on 3850 wireless

[Thomas P]

Hello,

I have an ACS 5.4 (radius server), a cisco 3850 3.3.4XE (Wifi controller) and a 7925 IP Phone.

I want to configure a WLAN to authenticate my 7925 using MAB (Mac Athentication Bypass).

Here is my WLAN configuration:

wlan WIFITOIP 2 WIFITOIP
 aaa-override
 accounting-list AAARadius
 no broadcast-ssid
 client vlan 100
 ip dhcp server 10.1.1.1
 no mobility anchor sticky
 nac
 no security wpa
 no security wpa akm dot1x
 no security wpa wpa2
 no security wpa wpa2 ciphers aes
 security dot1x
 security dot1x authentication-list AAARadius
 no shutdown

I configured the 7925 with the following network profile:

SSID: WIFITOIP

Security mode: open

Mode 802.11 : Auto-a

The IP Phone is not able to connect the SSID, I have the error "Connection error" displayed on the screen and I don't see any request on the ACS server.

Could you please help me? Maybe I missed a command somewhere?

Thank you.

Thomas.

[Leo Laohoo]

792X phones do not support MAB.  They are more tuned to support CCKM.  

[Thomas P]

We decided to use WPA/PSK2 and it is working .

Thanks for your helps.

[Viten Patel]

Hi thomas,

whats the use case? why would you try MAB for 7925 phones? Leo said it right, you need to have 802.1X for those phones preferably CCKM encryption