Dot1x authentication behind a Cisco Deskpro (IPPhone) issue

tmichel
New here

Dot1x authentication behind a Cisco Deskpro (IPPhone) issue

I connected a DeskPro to an MS120-8FP switch and configured dot1x with Multi-Domain authentication. The DeskPro gets placed into the voice vlan as expected, when connecting a PC it gets assigned the data vlan (both via CoA fromt eh Radius server). So that looks fine.

 

However, when the PC disconnects and reconnects later, no new authentication happens. The PC immediately gets access again. If adding a different PC, it gets no network connectivity at all. My guess it this is due to the different MAC address.

 

I suspect (without confirming) this happens with other IP phones as well.

 

This means each time I connect a different PC to the DeskPro I need to unplug the network cable of it to trigger a new authentication - which is not a viable option.

 

Anyone knows how to get the MS120 to trigger reauthentication when a PC gets disconnected/reconnected?

1 Reply 1
RWelch
A model citizen

RADIUS Issue Resolution Guide 

If you found this post helpful, please give it Kudos. If my answer solves your problem please click Accept as Solution so others can benefit from it.
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels