Cat.3560 (ACS 4.1(1)) MDA authenticates phone in DATA domain

[pverstegen]

Hi,

I configured MDA on a 3560 (c3560-ipbasek9-mz.122-53.SE2.bin) with ACS 4.1(1) Build 23 Patch 5 as documented in attached pdf file.

Unfortunately the Cisco IP Phone 7941 authenticates in the DATA domain and not in the VOICE domain.

Does anyone know what's wrong? Looks like the ACS config is correct!

Regards, Peter

[pverstegen]

Some additional info:

Seems my ACS server sends a malformed AVpair back to the switch which it doesn't understand.

RADIUS:   Cisco AVpair       [1]   40  "device−traffic−class=voice"

This should look like this I think:

RADIUS:   Cisco AVpair       [1]   28  "device-traffic-class=voice"

Is this a bug in ACS 4.1(1) or maybe in the switch? What can I do?

Best regards,

Peter

[pverstegen]

As a matter of fact it worked already since I manualy put in the AV pair letter for letter.

So this was a copy paste problem.

Case closed!