Security

Reply
Highlighted
Contributor II

Avaya 802.1X VoIP Phone with Aruba Switch and CPPM

Hi, what is the best practice for an 802.1X environment where the PC receives the network of an Avaya IP phone which I am interested in having the phone by MAC-Auth to assign its Voice Vlan, it is necessary to install the certificate on the telephone switch or on the phones? or is it not necessary? Clearpass if it authenticates me and assigns the Role only "Offline" because it does not have an IP Voice Network, in the Switch it appears as "W 09/27/18 12:15:29 05204 dca: ST1-CMDR: Failed to apply user role to macAuth
             client 6CA84988233B on port 1/15: user role is invalid. "
The pc works well for me in 802.1X.

Thank you.

MVP Guru

Re: Avaya 802.1X VoIP Phone with Aruba Switch and CPPM

Can you please share your user role configured on the switch config and the RADIUS attribute you are returning from ClearPass ?



Thank you

Victor Fabian

Pardon typos sent from Mobile
Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Contributor II

Re: Avaya 802.1X VoIP Phone with Aruba Switch and CPPM

Thanks for answering,
Annex configuration information in the Switch and the Access tracker in Clearpass, what I want is for MAC to send the VLAN ID to the phone, but in the Switch does not assign the Role so I know that my configuration is wrong on the side of the Switch Aruba since Clearpass does "login" but sees it "offline" because it does not have a network. I would like to know which side I have the wrong configuration or that I should add because the Switch does not give me the Role or the Vlan ID.
Again, thank you very much for answering.
Greetings.

MVP Guru

Re: Avaya 802.1X VoIP Phone with Aruba Switch and CPPM

Please follow the instructions here:
https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=28803



Thank you

Victor Fabian

Pardon typos sent from Mobile
Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: