I have a problem getting Cisco 7942 IP phones to come up in the voice VLAN with 802.1x. With the following configuration when the phone starts up, authentication with the ACS server is good but when I issue the command show mac address-table f0/1 the switch reports that the phone is up in the data VLAN. The phone though reports it is in the voice VLAN. I have configured the ACS group that the IP phones belong to with to use "device-traffic-voice=voice"and the global config on the switch for aaa is also shown below.
I did have a problem when the phones firmware was 8-5-5 where dot1x authentication first succeeded but then failed with EAP_FAST. Downgrading the firmware to 8-4-4S has resolved this and this is now where I am.
aaa new-model ! ! aaa authentication login default local aaa authentication dot1x default group radius aaa authorization exec VTY group tacacs+ none aaa authorization network default group radius aaa accounting exec VTY start-stop group tacacs+ ! ! dot1x system-auth-control dot1x guest-vlan supplicant
The short answer is that you don't.... That isn't entirely true while at
the same time it kind of is, but for the most part you don't configure
the softkeys. You enable or disable them via TCL. Here is the long
answer. Be sure to read the whole thing or e...
Topology: IP Phone > Switches > Microsoft NPS setup to forward 802.1x
proxy to > ISE 2.1 patch 3 Authentication: EAP-TLS using Cisco MIC SANs
Phone Models 802.1X support? 802.1x flavor Addtl Comment EAP-MD5 EAP-TLS
Cisco 3905 Y Y N Cisco 6911 Y Y N Cisco ...
This document describe how DST changes and how time changes are
implemented in DST. Daylight Saving Time (DST) is the practice of
setting the clocks forward 1 hour from standard time during the summer
months, and back again in the fall, in order to make b...