Solved: ACS 4.1(1) Build 23 Patch 5 with MDA authenticates phone in DATA domain

pverstegen · ‎07-26-2010

Hi,

I configured MDA on a 3560 (c3560-ipbasek9-mz.122-53.SE2.bin) with ACS 4.1(1) Build 23 Patch 5 as documented in attached pdf file.

Unfortunately the Cisco IP Phone 7941 authenticates in the DATA domain and not in the VOICE domain.

Does anyone know what's wrong?

Regards, Peter

jedubois · ‎07-29-2010

Hello,

What browser are you using to define the AV Pair on ACS? Please reinput the AV Pair on ACS using Internet Explorer and see if this makes a difference.

--Jesse

View solution in original post

pverstegen · ‎07-29-2010

Some additional info:

Seems my ACS server sends a malformed AVpair back to the switch which it doesn't understand.

RADIUS: Cisco AVpair [1] 40 "device−traffic−class=voice"

This should look like this I think:

RADIUS: Cisco AVpair [1] 28 "device-traffic-class=voice"

Is this a bug in ACS 4.1(1) or maybe in the switch? What can I do?

Best regards,

Peter

jedubois · ‎07-29-2010

Hello,

What browser are you using to define the AV Pair on ACS? Please reinput the AV Pair on ACS using Internet Explorer and see if this makes a difference.

--Jesse

pverstegen · ‎07-29-2010

Thanks a lot. As a matter of fact it worked already since I manualy put in the AV pair letter for letter.

So this was a copy paste problem.

Case closed!