dot1x + nortel IP Phone

Unanswered Question
Jun 6th, 2007
User Badges:
  • Red, 2250 points or more


I have a small query with respect to connecting nortel IP phones on dot1x enabled port :I'm planning to connect a nortel IP Phone on one of the ports enabled for 802.1x... i do not want to connect any PC behind the phone. I want the phone to work, as usual, making calls outside. As I see with the existing configurations on the switch, the nortel ip phone connectivity is configured as a data VLAN and not the voice VLAN.. so, will this affect the working of the phone when dot1x is enabled ??

Can someone clarify on this? Has someone implemented dot1x with nortel phones ?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
anandramapathy Thu, 06/07/2007 - 00:45
User Badges:
  • Bronze, 100 points or more

How are you going to get the Ip Phones authenticated to the network without disabling the dot1x feature on the port ?

In our case we disable the dot1x security on the port connected to the Ip Phone & enable port security based on MAC address of the IP Phone ( either hard code or enable auto learning of the MAC )

sachinraja Tue, 06/12/2007 - 08:50
User Badges:
  • Red, 2250 points or more

I will try the multi-domain auth feature. i think thats the only solution available now.

anandramapathy Tue, 06/12/2007 - 20:14
User Badges:
  • Bronze, 100 points or more

Good idea.

If you are okay with the following then it is fine

If the port becomes unauthorized (re-authentication fails or an Extensible Authentication Protocol over LAN [EAPOL]-logoff message is received), all attached clients are denied access to the network.


This Discussion