Wired Intelligent Edge

 View Only
Expand all | Collapse all

Aruba AOS-S switches and Clearpass TEAP authentication Avaya J100 phones (MAC Auth) - > PC

This thread has been viewed 22 times
  • 1.  Aruba AOS-S switches and Clearpass TEAP authentication Avaya J100 phones (MAC Auth) - > PC

    Posted 5 days ago

    Hello,

    We are in the midst of deploying dynamic segmentation using TEAP for windows machines and we have encounterd an issue where the pc is plugged into the back of a phone.

    We have  Avaya J100 series voip phones authenticating via MAC auth and then we have a PC plugged into the back port authenticating via TEAP using UBT to connect into aruba wireless controllers which seems to break the connection of both systems.

    If either device are plugged in by themselves the autehntication and UBT all work the phones use MAC auth and are able to communicate out the local switch connection.

    If we plug the pc into the back of the phones ethernet port the phone loses connection and goes into aquiring service mode and the pc authenticates in clearpass and looks like it should be good but the network does not connect properly

    The config worked with MAC auth and EAP auth/MSCHAP but fails with teap and ubt.

    sh port-access cli 2/c9
    Downloaded user roles are preceded by *

    Port Access Client Status

      Port  Client Name   MAC Address       IP Address      User Role         Type   VLAN

      2/C9  xxxx ... ac91a1-953af2                   172.23.33.168   *WCSG_USER_IT-... 8021X 4091
      2/C9  c81fead681ec  c81fea-d681ec     172.23.216.112  *WCSG_RED_Phon... MAC 1216

    Anyone have any experience with this type of set up we can't seem to get this to work.

    Thanks,



    -------------------------------------------


  • 2.  RE: Aruba AOS-S switches and Clearpass TEAP authentication Avaya J100 phones (MAC Auth) - > PC

    Posted 5 days ago

    Seems there was something wrong with the config of the vlan in the DUR for the user when we changed that both seemed to work.

    -------------------------------------------