https://community.extremenetworks.com/t5/extremewireless-general/netlogin-mac-authentication-and-lldp-issue/m-p/28040#M50 Have you tried configuring NPS to assign the VLAN for the IP phone rather than relying on LLDP to assign it? The only thing I can think of off the top of my head is that during authentication the LLDP is not passing thorough for some reason.<BR /> <BR /> This may be a good case to open with GTAC to help troubleshoot live if you can. Thu, 17 Mar 2016 23:31:00 GMT TylerMarcotte 2016-03-17T23:31:00Z https://community.extremenetworks.com/t5/extremewireless-general/netlogin-mac-authentication-and-lldp-issue/m-p/28037#M47 Hello. <BR /> I have a customer with Cisco infrastructure and NPS Microsoft Radius and they are using MAC auth. (MAB) for the Cisco phones. I'm running some tests with a Summit X460-G2.<BR /> <BR /> I have netlogin configured on port 1 to authenticate an IP phone using mac authentication and a PC using 802.1x authentication. Initially both (PC and IP phone) devices get authentication and authorization with dynamic VLAN. Voice VLAN tagged and set LLDP (TLVs) to switch to recognize IP phone and place voice traffic in the correct VLAN.<BR /> <BR /> #<BR /> <BR /> configure netlogin vlan Auth<BR /> <BR /> enable netlogin dot1x mac <BR /> <BR /> configure netlogin authentication protocol-order dot1x mac web-based<BR /> <BR /> configure netlogin add mac-list ff:ff:ff:ff:ff:ff 48<BR /> <BR /> enable netlogin ports 1,3-5,7,9,11-19 dot1x <BR /> <BR /> enable netlogin ports 1,3-5,7,9,11-19 mac <BR /> <BR /> configure netlogin ports 1 mode mac-based-vlans<BR /> <BR /> configure netlogin ports 1 no-restart<BR /> <BR /> #<BR /> <BR /> configure lldp port 1 advertise system-capabilities<BR /> <BR /> configure lldp port 1 advertise vendor-specific med capabilities<BR /> <BR /> configure lldp port 1 advertise vendor-specific med power-via-mdi<BR /> <BR /> configure lldp port 1 advertise vendor-specific dot1 port-protocol-vlan-id vlan VOIP_OPT<BR /> <BR /> configure lldp port 1 advertise vendor-specific dot1 vlan-name vlan VOIP_OPT<BR /> <BR /> configure lldp port 1 advertise vendor-specific med policy application voice vlan VOIP_OPT dscp 46<BR /> <BR /> <BR /> <BR /> The problem is when for some reason the ip phone is disconnected and connected (port down/up) again both devices authenticates again, but the ip phone it is not recognized (lldp) by the switch and don´t receives ip address. The ip phone is recognized and back working again after I re-enter the following commands, even if they already standing in the configuration:<BR /> <BR /> <BR /> <BR /> configure lldp port 1 advertise vendor-specific dot1 port-protocol-vlan-id vlan VOIP_OPT<BR /> <BR /> configure lldp port 1 advertise vendor-specific dot1 vlan-name vlan VOIP_OPT<BR /> <BR /> configure lldp port 1 advertise vendor-specific med policy application voice vlan VOIP_OPT dscp 46<BR /> <BR /> Thu, 17 Mar 2016 06:14:00 GMT https://community.extremenetworks.com/t5/extremewireless-general/netlogin-mac-authentication-and-lldp-issue/m-p/28037#M47 Vitor_Barreiro 2016-03-17T06:14:00Z https://community.extremenetworks.com/t5/extremewireless-general/netlogin-mac-authentication-and-lldp-issue/m-p/28038#M48 Does cisco require a certain LLDP transmit interval? Thu, 17 Mar 2016 07:04:00 GMT https://community.extremenetworks.com/t5/extremewireless-general/netlogin-mac-authentication-and-lldp-issue/m-p/28038#M48 Jeremy_Gibbs 2016-03-17T07:04:00Z https://community.extremenetworks.com/t5/extremewireless-general/netlogin-mac-authentication-and-lldp-issue/m-p/28039#M49 Cisco? the ip phone? Thu, 17 Mar 2016 07:04:00 GMT https://community.extremenetworks.com/t5/extremewireless-general/netlogin-mac-authentication-and-lldp-issue/m-p/28039#M49 Vitor_Barreiro 2016-03-17T07:04:00Z https://community.extremenetworks.com/t5/extremewireless-general/netlogin-mac-authentication-and-lldp-issue/m-p/28040#M50 Have you tried configuring NPS to assign the VLAN for the IP phone rather than relying on LLDP to assign it? The only thing I can think of off the top of my head is that during authentication the LLDP is not passing thorough for some reason.<BR /> <BR /> This may be a good case to open with GTAC to help troubleshoot live if you can. Thu, 17 Mar 2016 23:31:00 GMT https://community.extremenetworks.com/t5/extremewireless-general/netlogin-mac-authentication-and-lldp-issue/m-p/28040#M50 TylerMarcotte 2016-03-17T23:31:00Z https://community.extremenetworks.com/t5/extremewireless-general/netlogin-mac-authentication-and-lldp-issue/m-p/28041#M51 Thank you Tyler. I am opening a case in the GTAC to get more help. Thu, 17 Mar 2016 23:31:00 GMT https://community.extremenetworks.com/t5/extremewireless-general/netlogin-mac-authentication-and-lldp-issue/m-p/28041#M51 Vitor_Barreiro 2016-03-17T23:31:00Z