I have implement Dynamic Vlan Assignement on our infrastructure. With some ICX 7250 (SPS08030e) and Aruba ClearPass for Authentication Server.
I have an issue when i try to authenticate Phone-IP (mac-auth). The Phone-IP are AASTRA 6731i.
When i connect he Phone-IP alone on the switch port. It dont get an IP and stay in the state (network initialize). But when i connect a computer(dot1x) behind the Phone-IP (on state initalize). The phone-IP WORKKKK !! And the cherry on the cake (french expression), When i connect the phone on the switch with the PC already on the phone, they both DON'T WORK.
Of course the authentication for computer alone work well.
Based on the details shared, Could you check once with only mac-auth for the IP-Phone and let us know. if with only Mac-auth for the Ip-phone works as expected , then try by adding the below statement :
auth-order mac-auth dot1x
under authentication, and check once more, here we would be allowing the system to undergo mac-auth first and then dot1x.