802.1x problem with non-Cisco IP Phone, VVID enabled.

I am testing with a 3750 PoE switch running 12.2(25)SEE1 and trying to configure 802.1x to work with Mitel IP phones.
I have voice and data vlans configured on each port. Turning on 802.1x causes the phone to hang and timeout in DHCP Discovery. The port status from the switch is "Unauthorized".
interface FastEthernet1/0/2
switchport access vlan 1
switchport mode access
switchport voice vlan 2
dot1x pae authenticator
dot1x port-control auto
no mdix auto
spanning-tree portfast
end
Should anything be configured besides the Voice VLAN to let phones onto the network? There is no computer behind the phone right now. The only information I can find says I need a VVID, and any clients behind it will cross the PVID.
Thanks.

Yes it does.
Apparently the Mitel phones (testing a 5215 dual-mode) we have support EAP-MD5, but we have a primarily PEAP/EAP-TTLS environment. Apparently the phones need to use a username/password entered on each phone before they will send that to a Radius server doing EAP-MD5. Our PEAP clients authenticate to a Microsoft Radius server, and our EAP-TTLS to a Funk box. Hopefully the Microsoft can support both EAP-MD5 phones and PEAP on the laptops, I'll have to find out.
I was hoping this was a quick and easy Cisco configuration error... oh well.

Similar Messages

Using 802.1X and non-Cisco IP Phones

Hi there,
Having some questions about an 802.1x/non-Cisco ip phone setup and was hoping to find some answers/user-experience with this setup.
Main questions i'm facing:
1) When using non-Cisco ip phones (eg Nortel or Siemens) and a previous authorized client connected behind this ip phone gets disconnected. What will this action do with the authorized state of 802.1X on the switch port? WIll it stay authorized until the reauth timer expires or does it reject communication from any other device?
2) What about EAPOL-Logoff messages from the ip phone to the switch. Are these only used by Cisco phones when they experience a link-status change on data ports?
Thanks for sharing your thoughts

Overall, you need to try and deal with the fact that a machine can disappear from the network and the network may not know about it directly (i.e. Link doesn't go down).
I have no idea what other phones do, but Cisco phones send an EAPOL-Logoff when something is unplugged. This lets the switch know directly, and 1X session start is torn down immediately, closing what would be a security hole.
Fundamentally, re-auth is a workaround only, and this is not the reason to enable re-auth to begin with.
If your phone doesn't send an EAPOL-Logoff in this case, the switch might be left thinking an attack is underway when someone else tries to plug in (with presumably a different MAC). You do NOT want this to occur.
Hope this helps,

Problem with wifi and I-phones 4S

Hello everyone,
I have a problem with my Cisco wifi.
Here at work i am using 2 Cisco 1100 series Aironet    (811G) (intalled in august 2005)
Product informations :
AIR-AP1121G-E-K9
Top                                       Assembly Serial Number:
FCZ0921V07A
System                                       Software Filename:
c1100-k9w7-tar.123-4.JA
System                                       Software Version:
12.3(4)JA
Bootloader                                       Version:
12.3(2)JA3
All I-phones 4S OS6 are kind of loosing connection, if i am using google i will be able to use it once but never twices, the second time google will always time out, but the users are still able to receive and send their emails so the connection is still up.
On the manager i can see every Iphone, and everything seems to be ok, the "secutrity" is a simple 128bits wep key and i have a macadress filter activated and finally the SSID is not broadcasted.
The iphones are working smoothly with any modern wifi.
So my questions are, is it a firmware problem? a configuration problem? or it is time to upgrade the hardware?
Thank you for any help you can provide.

Turning off the 2 Aironet and activating the router's wifi, this wifi is not powerfull enough to cover the whole office but for now this is more than enough.

Problems with a new IP phone 7906 after factory reset

Hi Guys
I am currently having problems with my new IP phone 7906 after doing factory reset and here is a video of it:
http://www.youtube.com/watch?v=vvCLtwIAwVw
I used this command I found on the net:
Hold down
while plugging in the phone and keep holding it until the message waiting indicator (red light) starts blinking. Then
release # and type 123456789*0# in sequence.
I was trying to switch my phone to sip and it also dont want to take tftp setup either.

Tim,
Found this on the net
http://www.cisco.com/en/US/ts/fn/620/fn62949.html
Might be woth giving it a go
6.Pull power on the phone (even if power is PoE).
7.Hold down the # key on the phone.
8.Continue holding down the # key and re-apply power.
9.While still holding the # key wait for the Message Waiting Indicator (MWI) light on the handset to start flashing.
10.Once the MWI light is flashing, release the # key and enter the following sequence exactly on the keypad:
3491672850*#
Once this sequence has been entered on the IP Phone, if all the network criteria above have been met, it should begin its recovery process. This process can take up to 15 minutes to finish. The phone may appear to be doing nothing during this time. However, if the phone does not recover after 20 minutes then it is possible that the recovery is stuck. In this case, re-examine your network and verify that steps 1-4 are in place, then re-issue the factory reset sequence.
* Note: The factory reset sequence is a way for a phone to clear flash and still upload to a valid firmware image. This is facilitated by the termxx.default.loads file, but requires that the image files listed in the termxx.default.loads file are available in TFTP for the phone to download. Open the termxx.default.loads file in any text editor. This loads file is essentially just a packing list showing all the OS and application files the phone needs to function. The files include a cnu, cvm, dsp, app and jar files. Please make sure that these files as listed in the termxx.default.loads file are in TFTP. ("xx" will be either "06" for the CP-7906G model, or "11" for the CP-7911G model.)
Additional Diagnostic Steps:
- Try a hard-coded IP address as a test to see if this resolves the upgrade failures. If it does, and the number of failing IP Phones is relatively few, this procedure may be the most expedient. After the IP Phone upgrades successfully, reconfigure the IP Phone to use DHCP.
- Try putting the phone on a hub or a different switch and see if this helps change the startup timing enough so that the upgrade completes successfully.
Regards
Alex

Problem with non iPhone users receiving my text sent pictures. Can I make them smaller files?

Problem with non iPhone users receiving my text sent pictures. Can I make them smaller files? I know that is possible for email sent pics.

My bad, It was a Verizon problem. When they upgraded my phone they were supposed to remove all blocks on messaging . Found out they did not do this. All messaging now works. Thanks for listening.

HT1871 Hello i have one IPhone 4S and I use 3G net in my mobile sometime I have problem with temperature in my phone at the SIM card or battery how can I fix this problem. By update or version of 6.1.3

Hello i have one IPhone 4S and I use 3G net in my mobile sometime I have problem with temperature in my phone at the SIM card or battery how can I fix this problem. By update or version of 6.1.3

Could it be because the SIM card got damaged while I cut it to fit the IPhone?
Very likely. Hard to believe the carrier in Mexico doesn't have a micro-SIM card available.
Or somehow the Chinese carrier found out and locked it?
No, which is not possible.
What can I do? Get a new SIM and see if it works again?
Get a micro-SIM from the carrier in Mexico that you don't have to manually cut down. If that carrier doesn't provide one, switch to another carrier that is not so low-budget.

I updated my IPhone 3GS to the new 5.1 operating system and have since had a range of problems with not only my phone but also my IPad.

I updated my IPhone 3GS to the new 5.1 operating system and have since had a range of problems with not only my phone but also my IPad.
Programs (Safari, mail, messages) keep crashing, mail will not delete properly (some will keep popping into my inbox again for no reason!!!), slow, settings lock up etc. etc.
This only seemed to become an issue once I updated to ios 5.1 and funnily also affected my Ipad even though i hadn't updated the software yet. I have since updated the software on my ipad thinking it might help too but that only made things worse!! So I am not sure if it's an ICloud issue, but when i try to disable ICloud my devices lock up as well.
The battery life is also shocking!!
I have hard reset both devices, restored both devices, reset the setting and tried a whole host of other suggestions (like closing background programs) on this forum buit nothing works and i am tearing my hair out.
I looked in the phone and ipad log and there do seem to be low memory reports though i don't know why these are occuring now when they never have before??
I don't know if I can restore the old operating system (If I can please let me know how). The phone or ipad are not jailbroken.

but you should have a backup in itunes.
Every time you sync your iOS device iTunes creates a backup. go check if its there, iTunes Preferences >Devices. and there you should see if you have a backup, and in case from which date the backup is.
And ofcourse you can get your icloud data back by just logging in with your Appleid under icloud in settings on the iphone.
But anyway, if the iPhone works when you restor it as new: try adding your backup, and see if the issue comes back. And experiment with your backup and try to work out what is causing the issue, my guess is that its some app! Good Luck!

Have an older 17 MacBook Pro, running OS 10.5.8. Software update says everyting is current. Just bought new iPhone 5S. Mac won't recognize phone, says I need newer version of iTunes. Have no problem with computer recognizing old phone or iPad.

Have an older 17 MacBook Pro, running OS 10.5.8. Software update says everyting is current. Mac doesn't have iCloud, preferences still shows MobileMe. Just bought new iPhone 5S. Mac won't recognize phone, says I need newer version of iTunes. Have no problem with computer recognizing old phone 3 or 1-1/2 year old iPad. I suspect I need to update OS, but as software update isn't telling me to do so, can I? What version would I need to go to?

Your MacBook Pro can be updated to run Mac OS X "Snow Leopard". Buy it. That will enable you to run the latest iTunes version.
Online (US): http://store.apple.com/us/product/MC573/mac-os-x-106-snow-leopard
Online (UK): http://store.apple.com/uk/product/MC573/mac-os-x-106-snow-leopard
Germany: http://store.apple.com/de/product/MC573/mac-os-x-106-snow-leopard
Elsewhere: call the phone number in the Apple Online Store
Apple's price is $19.99, £14.00, €18.

[SOLVED!] On USB drives, problems with non-English chars and HAL

Hello,
I am having a problem with non-English caracters (áãàçéẽê...) on files stored on my USB drive.
On Windows they're created with the correct name. But on Linux the files have the non-English characteres replaced by '?' and are not accessible.
If I manuallly mount the drives using 'mount -o iocharset=utf8 /dev/sdb1 /media/usbdisk' the characters are OK, so I think I just need to get HAL to pass the correct parameters to mount. However I don't know how to do that, and haven't found any good solution.
I tried to build a custom kernel setting the default charset as UTF-8 and it didn't work.
Any ideas? I'm using x86-64, HAL 0.5.13-3 and my locale is pt-BR.UTF-8.
Thanks!
EDIT: Actually, this is not a HAL problem, but a problem with 'exo'. For the solution, I edited /etc/xdg/xfce4/mount.rc and added iocharset=utf8 to the [vfat] category.
Last edited by Renan Birck (2009-11-28 20:54:23)

I don't use Thunar presently, but I looked in the Thunar Volume Manager doc and I didn't find anything to change the mount options of removable drives. I am not quite sure if it's possible or not. Maybe someone using it can tell for sure.
But if it is not possible to change the mount options, a possible solution is to disable the Thunar Volume Manager plugin and to use something else more configurable to manage the automount function.
Personally I use the halevt package from AUR which uses configuration files in the xml format.
It's not so easy to use but is highly configurable.
But there exists other tools also.
I can help you with halevt if you choose that way...

Problems with non-ASCII characters on Linux Unit Test Import

I found a problem with non-ASCII characters in the Unit Test Import for Linux. This problem does not appear in the Unit Test Import for Windows.
I have attached a Unit Test export called PROC1.XML It tests a procedure that is included in another attachment called PROC1.txt. The unit test includes 2 implementations. Both implementations pass non-ASCII characters to the procedure and return them unchanged.
In Linux, the unit test import will change the non-ASCII characters in the XML file to xFFFD. If I copy/paste the the non-ASCII characters into the Unit Test after the import, they will be stored and executed correctly.
Amazon Ubuntu 3.13.0-45-generic / lubuntu-core
Oracle 11g Express Edition - AL32UTF8
SQL*Developer 4.0.3.16 Build MAIN-16.84
Java(TM) SE Runtime Environment (build 1.7.0_76-b13)
Java HotSpot(TM) 64-Bit Server VM (build 24.76-b04, mixed mode)
In Windows, the unit test will import the non-ASCII characters unchanged from the XML file.
Windows 7 Home Premium, Service Pack 1
Oracle 11g Express Edition - AL32UTF8
SQL*Developer 4.0.3.16 Build MAIN-16.84
Java(TM) SE Runtime Environment (build 1.8.0_31-b13)
Java HotSpot(TM) 64-Bit Server VM (build 25.31-b07, mixed mode)
If SQL*Developer is coded the same between Windows and Linux, The JVM must be causing the problem.

Set the System property "mail.mime.decodeparameters" to "true" to enable the RFC 2231 support.
See the javadocs for the javax.mail.internet package for the list of properties.
Yes, the FAQ entry should contain those details as well.

Problems with non-ascii keywords

I have some problems with non-ascii keywords that makes the whole keyword feature useless for me. I don't know if I'm doing something wrong or if there something I'm missing completely.
The problem is that when I enter something like "grön" iPhoto sometimes refuses me to type in "grön" on another photo and "eats" the "ö". And if I select the matching keyword from the popup list iPhoto has changed the originally "grön" to "gr¨ön" (if that comes out right on the web). Here are a few screenshots to show what happens
If someone knows what happens I would really appriciate some hints on how to avoid this.
Note that adding/editing keywords works just fine in Aperture.

There is a long standing issue with iPhoto and non-ascii characters. I know of no solution.
iPhoto menu -> Provide iPhoto Feedback and report it as a bug.
Regards
TD

Can cisco MSE(mobility service engine) configured to work with non-cisco access points?

I understand that access points can be configured to forwards all the probe requests to cisco wifi controller. cisco MSE(mobility service engine) gets the probes from wifi controller to find the location of the mobile devices.
My question, can cisco MSE(mobility service engine) be configured to work with non-cisco access points?

No and the reason why is the NMSP communication from the MSE to the WLC. Other vendors don't support this so there is no communication happening.
-Scott

Auto Smartports with non-Cisco devices

I have used auto smartports in the past and have been successful creating macros that use mac-addresses.
My question is can I create a macro that works with non-Cisco devices that are CDP capable?
We have Motorolla access points that use CDP and I would like to use auto smartports to put them on their own VLANs.
Can it be done using CDP? What version of the IOS would I need to be on? Currently the 3750-Xs are on 12.2.(55).
Are there any guides or configuration examples? I've searched but have been unsuccessful in find anything so far.
I have seen some articles that reference device sensors and device profiles, but have no idea where to begin.
Thanks in advance for your support.

You may need to create a Cisco TAC case for this.
If not, then move this thread to the EEM section. If the Moto AP supports CDP then you can get someone (like Joe Clark) to build a small EEM script.
EEM is supported up to the 3560/3750.

Can WAE be integrated with non-cisco devices?

So far, all documentation that I read, WAE is used in conjunction with Cisco devices. Can WAE be integrated with non-cisco devices?
I guess, In-line mode should work ok, but how about off-path mode? An example or link will be appreciated.
Thanks!
Joe

Hi Joe,
It should be possible to use WAAS with non-cisco routers, as long as they support WCCP.
There are no documents on this because, the configuration from WAAS point of view would be the same, and the router configuration would depend on the vendor.
Regards
Daniel

Is this a common problem with the Samsung Nexus Phone

Going on my 3rd phone. The first brand new phone after 6
months would not allow the battery to be charged. The 2nd phone replaced under warranty
dropped calls and would not connect to the net. I am now waiting for the 3rd warranty
replacement phone. At this point I don't feel to good about my Samsung Nexus
Phone.

It was a Verizon customer service person who told me that this is a common problem with Samsung Nexus model phones. From what you are saying that is not the case. As you suggested the store did change the sim card
at no cost to me. Unfortunately it did not resolve the problem. The Brookfield Connecticut Verizon store could
not resolve the problem and said "it was a phone problem not a service problem." The local store and the Verizon national customer service would not exchange the phone or cancel the service without an early termination penalty.
The phone was sold to me by Verizon at a discounted price. I signed a 2 year service contract because of that promotional. I think Verizon and Samsung have a shared responsibility for the operation of the phone. Verizon customer service implied that there responsibility was limited to the service only. I say not so when you use it as a promotional tool to sell your service. I contacted Samsung tech service and they have accepted the reasonability of fixing the problem. Verizon needs to fix there problem with customer service and get all there people on the same page.

802.1x problem with non-Cisco IP Phone, VVID enabled.

Similar Messages

Maybe you are looking for