I am configuring 802.1x in the Lan network of my customer. My customer has switches 2960 and 3750 and cisco ip phone. I have problem with switches 3750 ,the ip phone cannot connect to Callmanager but when I connect the ip phone in any port of switch 2960 i have not problem. The configuration in 3750 and 2960 are the same. The version of IOS in all switches is c3750-ipbasek9-mz.122-25.SEE4
Hi Jorge, I have just looked at a working 802.1x config from a 3560-POE I have (not exactly the same I know) where I have some Cisco IP Phones and its almost the same as yours:
switchport access vlan 10
switchport mode access
switchport voice vlan 500
switchport port-security maximum 1 vlan access
switchport port-security maximum 1 vlan voice
switchport port-security aging time 3
switchport port-security violation restrict
switchport port-security aging type inactivity
srr-queue bandwidth share 1 70 25 5
srr-queue bandwidth shape 3 0 0 0
no snmp trap link-status
dot1x pae authenticator
dot1x port-control auto
dot1x violation-mode protect
dot1x timeout reauth-period server
service-policy input IPPHONE+PC-BASIC
ip dhcp snooping limit rate 100
In theory a 3750 & a 2960 (assuming the same IOS revision) should have the same behaviour since they are both based on a similar platform.
Previously you needed to have three MAC addresses configured for port-security to work with an IP Phone and a PC since the IP Phone initially appears on the access VLAN. However I know there was a feature change (around IOS 12.2(37)SE) where as soon as CDP kicked in from the IP Phone the switch removed it's MAC from the access VLAN so you can have a maximum of two MACs configured. You are running older software so you will need the three MAC maximum.
I would suggest the first thing to try would be upgrading the IOS to the latest IOS release which is 12.2(46)SE.
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...