Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

ClearPass 802.1x with Cisco IP Phones

This thread has been viewed 8 times

  • 1.  ClearPass 802.1x with Cisco IP Phones

    Posted Mar 11, 2018 02:14 PM

    We are trying to configure ClearPass 802.1x Authentication with Cisco IP Phones (CP-7841 models). The phones have pre-installed Manufacturing Installed Certificate (MIC). We tried installing the Cisco Manufacturing Certificate CA in the trusted CAs in ClearPass, but the phones still fail to authenicate. Any Suggestions? Thanks in advance.



  • 2.  RE: ClearPass 802.1x with Cisco IP Phones

    EMPLOYEE
    Posted Mar 11, 2018 02:16 PM
    What is shown on the alerts tab?


  • 3.  RE: ClearPass 802.1x with Cisco IP Phones

    Posted Mar 11, 2018 02:26 PM

    Hi cappalli,

    I currently do not have access to ClearPass but I can gather this info ASAP. As I remember, it was popping out a message "timed out" on the monitoring tab.



  • 4.  RE: ClearPass 802.1x with Cisco IP Phones

    Posted Mar 12, 2018 03:56 AM
      |   view attached

    Attached



  • 5.  RE: ClearPass 802.1x with Cisco IP Phones

    Posted Mar 12, 2018 06:34 AM

    Looks like a cert trust issue to me. Please go through below link for " Client did not complete EAP transaction"

    https://community.arubanetworks.com/t5/Security/RADIUS-Client-did-not-complete-EAP-transaction-Clearpass-6-3-1/m-p/164042#M12353



  • 6.  RE: ClearPass 802.1x with Cisco IP Phones

    Posted Apr 03, 2018 10:48 AM

    Hi;

     

     The authentication method for Cisco ip phones is EAP-MD5.

     

     I hope it helps.

     

     Angel De la Encarnacion.

     

    ACMP, ACCP, ACDX #544

     

    If this post is helpful, a kudo is appreciated.