mac address in data vlan - drop
Hello everybody! I faced such issue. When I connect CiscoPhone and a computer through it to my cisco switch port, authentication goes well (voice vlan for phone and data vlan for computer), but when I plug a computer off from Cisco Phone and plug in again, authentication is ok too but on port I see that: 1 a000xxxxxxxxxxxx DYNAMIC Drop 100 001exxxxxxxxxxxx STATIC Fa0/35 So computer can’t get access to local network. Port settings are following: --------------------------------------------------------- switchport mode access switchport nonegotiate switchport voice vlan 100 no logging event link-status authentication host-mode multi-domain authentication port-control auto authentication violation replace mab storm-control broadcast level pps 100 spanning-tree portfast spanning-tree bpduguard enable --------------------------------------------------------- How it can be fixed? (I work with freeradius-server-2.2.5 now) Thanks in advance, Alex Bilik С уважением, Александр Билик Инженер по информационной безопасности Группа управления коммуникациями Группа ЛСР E-mail: Bilik.AA@lsrgroup.ru<mailto:Bilik.AA@lsrgroup.ru> www.lsrgroup.ru [cid:image003.png@01D003E7.42ED21B0]
The first step is to verify that this is a freeradius issue and not due to dodgy ios on switch or on phone. And for that we need to see freeradius logs! alan
participants (2)
-
Alan Buxey -
Bilik.AA@lsrgroup.ru