Identity and Policy Control
Reply
Contributor
ssuet
Posts: 101
Registered: ‎09-21-2010
0

802.1x IP phones Avaya

Dear all

 

I m able to do 8021.x authentication for my PC and mac authentication for my IP Phones.But once i try 802.1x authentication for my IP-Phone.I didnt get success even im not getting any logs

 

 

IP-Phones is Avaya

Switch:EX-4200

 

Below is my config on switch for 802.1x

 

root# show
authenticator {
    authentication-profile-name Temp;
    interface {
        ge-0/0/1.0 {
            guest-vlan guest-vlan;
        }
        ge-0/0/2.0 {
            supplicant multiple;
        }
        ge-0/0/6.0 {
            mac-radius;
        }
    }
}

 

for Radius IC using as radius server and im using local authentication

root# show
radius-server {
    192.168.5.245 secret "$9$/xy/CuBhclMLNcSwYoaUDqmP"; ## SECRET-DATA
}
profile Temp {
    authentication-order radius;
    radius {
        authentication-server 192.168.5.245;
    }
}


 

any suggestion will be highly appreciated

 

Recognized Expert
Raveen
Posts: 415
Registered: ‎04-15-2010
0

Re: 802.1x IP phones Avaya

Hi,

 

Did you mean both user auth and MAC auth failed?

To which port of switch you have connected IP-Phone?

Is IC reachable from switch?

 

Can you attach sniffer capture and dot1x trace from the switchport?

 

Regards,

Raveen

Note: If this answers your question, you could mark this post as accepted solution, that way it helps others as well. Kudos will be cool if I earned it!
Super Contributor
apaul
Posts: 153
Registered: ‎11-06-2009
0

Re: 802.1x IP phones Avaya

Does the Avaya Phone that you use support dot1.x ? Have you enabled the phone dot1.x supplicant ?

Ashish Paul
Contributor
ssuet
Posts: 101
Registered: ‎09-21-2010
0

Re: 802.1x IP phones Avaya

Dear

 

I m having problem only with 802.1x Avaya Phone authentication   .Im attaching logs from Switch i can see request send and receive

 

Regarding the phone support avaya i did ask this to IPT according to them yes it supported

 

 

Thanks

Faizan Khurshid

 

Recognized Expert
Raveen
Posts: 415
Registered: ‎04-15-2010
0

Re: 802.1x IP phones Avaya

I hope you have already configured MAC Auth realm, MAC Auth server in IC.

Do you see radius reuest in IC?

 

Regards,

Raveen

Note: If this answers your question, you could mark this post as accepted solution, that way it helps others as well. Kudos will be cool if I earned it!
Contributor
ssuet
Posts: 101
Registered: ‎09-21-2010
0

Re: 802.1x IP phones Avaya

Dear Parveen

 

Mac address authentication is wokring fine  on Avaya .But  i need to authenticate phone 1608 with 802.1x 

But on the same support  if i connect my PC i can authenticate 802.1x

 

One port config as Data and Voice both

 

 

Thanks

Faizan Khurshid

Recognized Expert
Raveen
Posts: 415
Registered: ‎04-15-2010
0

Re: 802.1x IP phones Avaya

If I understnad right, independently you can get authenticated for both PC as well as phone.

Now you would like to connect phone in siwtch and PC to phone(multiple host scenario).?

 

Regards,

Raveen

Note: If this answers your question, you could mark this post as accepted solution, that way it helps others as well. Kudos will be cool if I earned it!
Contributor
ssuet
Posts: 101
Registered: ‎09-21-2010
0

Re: 802.1x IP phones Avaya

Dear RAveen

 

Everything is working only 802.1x for Avaya Phone .I go through the phones data shet, i got to know that we need to change to phone mode from simple to 802.1x

 

Thanks

 

Faizan Khurshid

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.