802.1x IP phones Avaya

[ssuet_]

Dear all

I m able to do 8021.x authentication for my PC and mac authentication for my IP Phones.But once i try 802.1x authentication for my IP-Phone.I didnt get success even im not getting any logs

IP-Phones is Avaya

Switch:EX-4200

Below is my config on switch for 802.1x

root# show
authenticator {
authentication-profile-name Temp;
interface {
ge-0/0/1.0 {
guest-vlan guest-vlan;
}
ge-0/0/2.0 {
supplicant multiple;
}
ge-0/0/6.0 {
mac-radius;
}
}
}

for Radius IC using as radius server and im using local authentication

root# show
radius-server {
192.168.5.245 secret "$9$/xy/CuBhclMLNcSwYoaUDqmP"; ## SECRET-DATA
}
profile Temp {
authentication-order radius;
radius {
authentication-server 192.168.5.245;
}
}

any suggestion will be highly appreciated

[Raveen_]

Hi,

Did you mean both user auth and MAC auth failed?

To which port of switch you have connected IP-Phone?

Is IC reachable from switch?

Can you attach sniffer capture and dot1x trace from the switchport?

Regards,

Raveen

[apaul_]

Does the Avaya Phone that you use support dot1.x ? Have you enabled the phone dot1.x supplicant ?

[ssuet_]

Dear

I m having problem only with 802.1x Avaya Phone authentication .Im attaching logs from Switch i can see request send and receive

Regarding the phone support avaya i did ask this to IPT according to them yes it supported

Thanks

Faizan Khurshid

[Raveen_]

I hope you have already configured MAC Auth realm, MAC Auth server in IC.

Do you see radius reuest in IC?

Regards,

Raveen

[ssuet_]

Dear Parveen

Mac address authentication is wokring fine on Avaya .But i need to authenticate phone 1608 with 802.1x

But on the same support if i connect my PC i can authenticate 802.1x

One port config as Data and Voice both

Thanks

Faizan Khurshid

[Raveen_]

If I understnad right, independently you can get authenticated for both PC as well as phone.

Now you would like to connect phone in siwtch and PC to phone(multiple host scenario).?

Regards,

Raveen

[ssuet_]

Dear RAveen

Everything is working only 802.1x for Avaya Phone .I go through the phones data shet, i got to know that we need to change to phone mode from simple to 802.1x

Thanks

Faizan Khurshid