Author Topic: 802.1X  (Read 3137 times)

Offline pakman

  • Sr. Member
  • ****
  • Posts: 483
  • Karma: +1/-0
    • View Profile
802.1X
« on: January 16, 2014, 02:52:05 PM »
We've recently implemented 802.1X on phones and switches and it's been going good. Recently, though the following scenario has happened more than a few times and I don't know why it's happening.

good working phones at the same location get moved due to the employees moving and sometimes the phone won't boot backup. I get port access failure. Now there is no issue with the port but when I look at our ACS server it shows me that the username the phone is using trying to authenticate reverts to a "&" Has anyone else experience this before? I'm not sure if the phones only keep the settings for so long than default to this or maybe it's just flaky and this is what happens. Once i delete the 802.1x settings in the phone and re-enter the correct username all is well. As far as I know, no working phone has suddenly stopped authenticating but it does worry me that one day I might walk in and have 100 plus phones all need to be manually programmed again.

Thanks,
 


Offline jrg0852

  • Sr. Member
  • ****
  • Posts: 309
  • Country: us
  • Karma: +3/-0
  • Look out for the next tech. because it may be you!
    • View Profile
Re: 802.1X
« Reply #1 on: January 23, 2014, 02:29:54 PM »
Are you using this for wireless bases? Just curious.

Offline pakman

  • Sr. Member
  • ****
  • Posts: 483
  • Karma: +1/-0
    • View Profile
Re: 802.1X
« Reply #2 on: January 24, 2014, 11:53:23 AM »
no, we've locked down all the ports in our offices.

Offline jrg0852

  • Sr. Member
  • ****
  • Posts: 309
  • Country: us
  • Karma: +3/-0
  • Look out for the next tech. because it may be you!
    • View Profile
Re: 802.1X
« Reply #3 on: January 24, 2014, 12:07:43 PM »
Are the voice POE switches set to 100/full? If so how about changing 1 phone with the issue to match the switch port and see what happens. Thanks.

Offline LoopyLou

  • Hero Member
  • *****
  • Posts: 556
  • Country: ca
  • Karma: +7/-0
    • View Profile
Re: 802.1X
« Reply #4 on: January 24, 2014, 01:59:47 PM »
I wonder if its intentional. i.e you moved a phone to a new location. The 3300 sees the move because it can see that the port AMC address has changed. It thinks "hmm something is going on here" and decides that it will force a reset of the credentials to make sure the set movement was valid. Not sure myself never acutally used the 802.1x.

Offline pakman

  • Sr. Member
  • ****
  • Posts: 483
  • Karma: +1/-0
    • View Profile
Re: 802.1X
« Reply #5 on: January 24, 2014, 03:29:30 PM »
yes, the ports are setup corretly to match the phone's speed. Now to LoopyLou's comment I'm fairly positive we've had other folks within the same location move around and have no issues. However, since I don't know 100% I will test this theory at my location by taking a good working phone and just plug it into a new port. I will let you know how it goes.

Offline LoopyLou

  • Hero Member
  • *****
  • Posts: 556
  • Country: ca
  • Karma: +7/-0
    • View Profile
Re: 802.1X
« Reply #6 on: January 27, 2014, 09:27:38 AM »
"port AMC" was to be "port MAC". Sorry.


 

Sitemap 1 2 3 4 5 6 7 8 9 10