12-05-2023 05:06 AM
Hi dear community,
I need your help ^^
I have implement Dynamic Vlan Assignement on our infrastructure. With some ICX 7250 (SPS08030e) and Aruba ClearPass for Authentication Server.
I have an issue when i try to authenticate Phone-IP (mac-auth).
The Phone-IP are AASTRA 6731i.
When i connect he Phone-IP alone on the switch port. It dont get an IP and stay in the state (network initialize). But when i connect a computer(dot1x) behind the Phone-IP (on state initalize). The phone-IP WORKKKK !! And the cherry on the cake (french expression), When i connect the phone on the switch with the PC already on the phone, they both DON'T WORK.
Of course the authentication for computer alone work well.
This is my config :
authentication
auth-default-vlan 60
no filter-strict-security enable
auth-vlan-mode multiple-untagged
disable-aging denied-mac-only
dot1x enable
dot1x enable ethe 1/1/10
mac-authentication enable
mac-authentication enable ethe 1/1/10
interface ethernet 1/1/10
dot1x port-control auto
inline power
voice-vlan 8
lldp med network-policy application voice tagged vlan 8 priority 6 dscp 6 ports ethe 1/1/10
lldp run
I hope someone can help me for this case 🙂
Thank you very much.
Kevin.