How to authenticate Cisco IP Phones via ISE

Hello
Has anybody an idea or official link to a Cisco instruction, how to configure a Cisco ISE to authenticate Cisco IP Telephony via EAP-TLS (802.1x)?
Can anybody help?
Thanks!
Marco

HEre you go.
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_auth_pol.html#wp1146222
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

Similar Messages

Cisco ip phones authenticate 802.1x with cisco ise 1.3

Dear all,
I want to configure cisco ise 1.3 with 802.1x , to authenticate cisco ip phones ( CUCM 10.5.2 ) with LSC certificate.
How I have to configure cisco ise authentication rules for 802.1x with cisco ip phones? Are there any configuration examples ?
Thanks

following are ISE 802.1x sample authentication rules..you can change the protocol (Policy -> policy elements - > results -> authentication and you can select the proctocal)

How can I connect a Cisco 7940 phone to a trixbox via SIP

how can I connect a Cisco 7940 phone and CIsco 7970 to a trixbox via SIP

...by configuring the trixbox according to the required configuration and changing your firmware on the phones to SIP{
=============================
Please remember to rate useful posts, by clicking on the stars below.
=============================

Jabber Click to Dial via Cisco IP Phone not enabled - How to ?

After installing Jabber for WIN i would like to know how i can enable "click to dial" for my desktop Cisco IP Phone ? With Webex connect this is working well but not with jabber currently and i can´t find the place to configure...please help...

Hi Tom,
Are you not able to click to dial from contact list? When you hover over a contact, do you see phone icon?
Thanks,
Maqsood

Authenticating cisco phones via EAP-TLS by LSC with Radiator

Hi everyone,
On a post from 4 years ago (https://supportforums.cisco.com/discussion/10952961/8021x-phone-authentication-eap-tls-mic-only) I read that someone managed to work authenticate phones via EAP-TLS without ACS, but rather using a Radiator server. They authenticated by MIC on each phone. I was wondering if anyone knows whether or not it's possible to do so by LSC, and if so how is it different than by MIC?
Thanks in advance!

I think the default EAP-TLS session timeout is zero sec. Enter the maximum number of seconds you want the client to remain connected to the network access device before having to reauthenticate in the Session TImeout field. If you enter a number greater than 0, the lesser of this value and the remaining resumption limit is sent in a Session-Limit attribute to the RADIUS client on the RADIUS Access-Accept response.
If you enter 0, a Session-Limit attribute is not generated directly. A 0 does not prevent the authentication methods that perform secondary authorization from providing a value.
Entering a value such as 600 (10 minutes) does not necessarily cause a full reauthentication to occur every 10 minutes. You can configure the resumption limit to make most reauthentications fast and computationally efficient.

ISE - dot1x EAP TLS for Cisco IP Phones

Hi Gents,
I have a question about the CA configs for ISE or ACS.
As I understand, LSC certificate is issued by the CUCM by its Certificate Authority Proxy Function. If an IP Phone needs to be authenticated by its LSC (Locally Significant Certificate), which of the following CA we need to trust:
1. Cisco CA Certificate
2. CUCM Locally signed Certificate or CUCM Identity Certificate
And if these certificates are imported into ISE/ACS, will the ISE/ACS will be able to authenticate the IP Phone if the dot1x EAP-TLS authentication is enabled for IP Phones?
Is there any other configs needed?
I would highly appreicate if someone can clearify me this process.
Regards,

I got the answer, for the first part of the EAP TLS authentication: Phone authentication
In an IEEE 802.1X authentication, the AAA server is responsible for validating the certificate provided by the phone. To do this, the AAA server must have a copy of the root CA certificate that signed the phone's certificate. The root certificates for both LSCs and MICs can be exported from the CUCM Operating System Administration interface and imported into your AAA server
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6638/config_guide_c17-605524.html#wp9000412
As this is EAP TLS, Server (ISE/ACS) is also required to authenticate itself to the phone.
What is needed for this?

ISE - Cisco IP Phone profiling

Dears
i have issues profiling the Cisco ip phones , it's profiled as "PROFILED" the only probes i enabled on switches and ISE is Radius and now i know the i need to enable CDP device sensor so it can be sent via Radius accounting but i can't find the commend "device-sensor account" on my switch , i use "
Version 15.0(2)SE3" and WS-C2960S-24PS
any ideas ?

With ISE Release 1.2*, Cisco is delivering, a unique feed service that provides new and updated profiles for various IP enabled devices when vendors release new devices. So ISE customers will be able to recognize new devices, in addition to a multitude of other network attached devices such as printers, video cameras, and specialized mobile computing devices.
Cisco works with various vendors, partners, customers, etc. to profile the multitude of IP enabled devices that are expected to be deployed in various customer environments and create profiles for these. These profiles are made available through the Cisco Feed Service. An ISE server* that is configured to connect to the Feed Service establishes a secure connection with cloud based Feed Service. The various profiles on the Feed Service are then automatically downloaded to the ISE server, thus providing ISE customers the ability to stay abreast and detect various IP enabled devices that connect to their network. The Feed Service will be available with the release of ISE 1.2* software release and is part of the Advanced License.

I have a new iPhone as my old one was stolen. How can I put my old contacts on to my new phone via iCloud???

I have a new iPhone as my old one was stolen. How can I put my old contacts onto my new phone via iCloud? Thanks.

http://support.apple.com/kb/HT4859

How can i erase the firmware of cisco 7912 phone ?

how can i erase the firmware of cisco 7912 phone ? the firmware is crashed in this 7912 phone , i want it to download another copy from CUCM8.5 .
the way i did on 7911phone doesn't work on 7912.

https://supportforums.cisco.com/discussion/10797901/reset-factory-default-ip-phone-7912
You can try that procedure but I'm not sure how far that factory reset goes on those phones. I know the 7940/60 series you can blow out everything except the CNU which would do exactly what you are looking for.

How to upgrade cisco 7940 ip phones

hi
i have cisco 2801 autocom with 7940 ip phones.
i wish top upgrade to the latest version but don't really know how i can do it.
please ask everything you need to know to solve the problem.
thanks a lot
reply to :
[email protected]

Do you mean upgrade the phone load? If yes, then try upgradign to the latest phone load that is 8.0.4 SR2 that can be found in the following link:
http://www.cisco.com/cgi-bin/tablebuild.pl/ip-7900ser
cmterm-7940-7960-sccp.8-0-4.exe
7940/7960 IP Phone load - Compatible CCM Versions: 3.3, 4.0, 4.1, 4.2
The installation instructions are in the Readme file in the same link:
When using Cisco CallManager Release 5.0 or later
For Cisco CallManager 5.0, you must do all software installations and upgrades by using the Software Upgrades menu options. The system can upload and process only software that Cisco Systems approved. You cannot install or use third-party or Windows-based software applications that you may have been using with a previous version of Cisco CallManager with Cisco CallManager 5.0.
Using your web browser, login to the Cisco IPT Platform Administration web page
Under the Software Upgrades menu, select Install/Upgrade.
Fill in the appropriate values in the Software Location section for the file you downloaded above, and click Next.
In the Available Software drop-down box, select the file you downloaded above, and click Next.
After validating the MD5 has the correct value, click Next.
In the Warning box, verify you have selected the correct firmware, then click Install.
Check that you received a Success message.
When Using Cisco CallManager earlier than Release 5.0
Login to the console of the CallManager Server where you downloaded the installer.
Note the location where you saved the downloaded file.
Double-click the file to start the installation.
In the Welcome window, click Next.
In the License Agreement window, click Yes.
If a Read Only File Detected window pops up, click Yes.
After the installation finishes, click OK.
Reset all corresponding devices.
Cisco IP Phone Model 7940/7960 Alternate Firmware format
The Cisco IP Phone Model 7940/7960 Firmware version 8.0(4) is also supplied in a zip file, as an alternative in case a Cisco CallManager is not available to run the executable installer program. The name of this file is cmterm-7940-7960-sccp.8-0-4.zip.
After unzipping the firmware files, they should be manually copied to the appropriate directory on the TFTP server.

I just got a new 4S, but cant figure out how to get the contacts from my old 3GS to my new phone via ITunes. Help!

I just got a new 4S, but cant figure out how to get the contacts from my old 3GS to my new phone via ITunes. Help!

You should have been syncing your contacts with your computer all along.
Have you failed to do this?
iPhone: Transferring information from your current iPhone to a new iPhone

I have recently purchased the highest storage but was unable to backup my phone via icloud, the button on my mphone to backup on icloud is grey out, anyone knows how to resolve the problem? What's the point of purchasing the biggest storage?

i have recently purchased the highest storage but was unable to backup my phone via icloud, the button on my iphone to backup on icloud is grey out, anyone knows how to resolve the problem? What's the point of purchasing the biggest storage?

First check that your device is correctly connected to the wifi/internet (settings > wifi)
If your back up continually fails, you might try turning off back up on your mobile device (settings > iCloud > storage & backup) and then deleting the backup file from iCloud by swiping the backup file on the mobile device (settings > iCloud > storage & backup > manage…) and then turning back up on again.
If this doesn't help, try turning off some items for back up in a pattern to try to establish if your problem is being caused by specific data on your device.
Being able to back up to the cloud can be very useful, especially if you don't have access to a computer or have infrequent access to one, however unless you specifically need to use iCloud for back up, you will find backing up to iTunes significantly more convenient and possibly more reliable.
More about iCloud v iTunes Back Up

HT201328 I've purchased a used iPhone 3g via similar site like eBay in Hungary.The phone is legal but no invoice was included.How could I unlock the phone?

I've purchased a used iPhone 3g via similar site like eBay in Hungary.The phone is legal but no invoice was included.How could I unlock the phone?

cv.references wrote:
How could I unlock the phone?
ONLY the Carrier it is Locked to can unlock it.
No one here will know who that Carrier is.
The iPhone 3G can only run iOS 4.2.1

How to connect android phone via usb using mavericks?

I am fairly new to Macs and want to transfer music files from my PowerBook to my LG Android phone via a USB connection. Any suggestions on how to accomplish this? Thanks in advance for any help.

I do not have the equipment to try this setup first hand, however, it could be possible to set this up. It appears that the phone and Operating System has the means to print pre-installed. You will need a proper OTG cable also.
Ensure that under Settings> Printing that the HP Plug in is installed and turn on. If you do not have it, it can be found in the PlayStore. HP Print Service Plugin<---
After that, simply connecting the cable to both phone and printer should allow you the means of printing.
JERENDS
I work on behalf of HP
Please click “Accept as Solution” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos Thumbs Up" to the left of the reply button to say “Thanks” for helping!

How can I pair an iPad with an android phone via Bluetooth?

How can I pair an iPad with an android phone via Bluetooth? I get the pair message on both, but after acknowledging on both devices the connection fails to establish. I looked around and everything I found had to do with file transfer. I can share access to the internet via Bluetooth and it works with other devices I've tried this with. Thanks.

Sorry. After re-reading my question I realized that I wasn't clear. I don't want to transfer files. I want to use PDANet from my android and connect my iPad for internet access via bluetooth. I know this is a 2 way transfer of data not very different from transferring files, but I just want to be sure that this is not going to work so I can stop trying as if I'm doing something wrong. Like I said, I can do this with any other bluetooth capable device/computer I have. Seems like it's just not working either by design or as a result of some limitation. I guess 2 way communication with a headset gave me hope that internet access would work. Thanks!

How to authenticate Cisco IP Phones via ISE

Similar Messages

Maybe you are looking for