Hi
I have ISE 1.1 and cisco 2960
I configured MAB in the ISE for the IP phone and the printer
It work because user can print and use IP phone for call
But log is not good for the IP phone
PRINTER use MAB but The IP phone use dot1x instead of MAB (log below)
There is no computer connected behind the IP phone
I am planning to connect computer on some IP phone in the future, so your helps and suggestion should take care of it
Why MAB is not work on the IP PHONE
Thanks in advance for your help
PRINTER PORT
ISESWITCH#show auth sessions int f0/2
Interface: FastEthernet0/2
MAC Address: a0b3.cc9d.6ebb
IP Address: 192.168.1.150
User-Name: A0-B3-CC-9D-6E-BB
Status: Authz Success
Domain: DATA
Security Policy: Should Secure
Security Status: Unsecure
Oper host mode: multi-auth
Oper control dir: both
Authorized By: Authentication Server
Vlan Policy: 10
ACS ACL: xACSACLx-IP-PERMIT_ALL-52179aa0
Session timeout: N/A
Idle timeout: N/A
Common Session ID: 0AFD190A00000B4E11F6003A
Acct Session ID: 0x000013FF
Handle: 0x27000B4E
Runnable methods list:
Method State
dot1x Failed over
mab Authc Success
IP PHONE PORT
ISESWITCH#show auth sessions int f0/3
Interface: FastEthernet0/3
MAC Address: 001a.7ea7.4a3f
IP Address: 192.168.2.16
Status: Running
Domain: UNKNOWN
Security Policy: Should Secure
Security Status: Unsecure
Oper host mode: multi-auth
Oper control dir: both
Session timeout: N/A
Idle timeout: N/A
Common Session ID: 0AFD190A00000B5011F7919A
Acct Session ID: 0x0000140D
Handle: 0xC3000B50
Runnable methods list:
Method State
dot1x Running
mab Not run
ISESWITCH#
configuration of each switch port
interface fastEthernet0/x
switchport access vlan 2
switchport mode access
ip access-group ACL-DEFAULT in
authentication host-mode multi-auth
authentication open
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
mab
dot1x pae authenticator
spanning-tree portfast
