Cat.3560 (ACS 4.1(1)) MDA authenticates phone in DATA domain

Unanswered Question
Jul 28th, 2010


I configured MDA on a 3560 (c3560-ipbasek9-mz.122-53.SE2.bin) with ACS 4.1(1) Build 23 Patch 5 as documented in attached pdf file.

Unfortunately the Cisco IP Phone 7941 authenticates in the DATA domain and not in the VOICE domain.

Does anyone know what's wrong? Looks like the ACS config is correct!

Regards, Peter

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
pverstegen Thu, 07/29/2010 - 01:13

Some additional info:

Seems my ACS server sends a malformed AVpair back to the switch which it doesn't understand.

RADIUS:   Cisco AVpair       [1]   40  "device−traffic−class=voice"

This should look like this I think:

RADIUS:   Cisco AVpair       [1]   28  "device-traffic-class=voice"

Is this a bug in ACS 4.1(1) or maybe in the switch? What can I do?

Best regards,


pverstegen Thu, 07/29/2010 - 06:29

As a matter of fact it worked already since I manualy put in the AV pair letter for letter.

So this was a copy paste problem.

Case closed!


This Discussion