This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Extreme Networks
- Community List
- Wireless
- ExtremeWireless (General)
- RE: Network Login 802.1x with Mitel phone 6865i an...
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Network Login 802.1x with Mitel phone 6865i and X440 fails because of a link down
Network Login 802.1x with Mitel phone 6865i and X440 fails because of a link down
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
05-12-2016 12:19 PM
Environment : EXOS X440-48P version 15.6.3.1 patch 1-5, X150-24t version 12.6.5.2,
Mitel phones Mitel 6865i version 4.0.0.2031, FreeRADIUS, DHCP server
LLDP is not configured on the switches and the phones VLAN is dynamicaly created on the switches after the phones are authenticated
As you can see below,the proccess is succesfull with X150-24t
08:24:38.44 Network Login 802.1x user AuthUser logged in MAC XX:XX:XX:XX:XX:XX port 15 VLAN(s) "V_VOICE", authentication Radius
08:24:37.83 port 15 link UP at speed 100 Mbps and full-duplex
08:24:36.18 Network Login user AuthUser cleared due to link down event, Mac XX:XX:XX:XX:XX:XX port 15 VLAN(s) "V_VOICE"
08:24:36.18 port 15 link down
08:24:32.55 Network Login 802.1x user AuthUser logged in MAC XX:XX:XX:XX:XX:XX port 15 VLAN(s) "V_VOICE", authentication Radius
08:24:03.64 port 15 link UP at speed 100 Mbps and full-duplex
08:23:25.44 Port 24 link UP at speed 100 Mbps and full-duplex
08:23:08.62 port 15 link down
08:23:08.56 port 15 link UP at speed 100 Mbps and full-duplex
With X440-48P,the proccess failed after the link down
09:15:11.01 port 15 link UP at speed 1 Gbps and full-duplex
09:15:08.18 Network Login user AuthUser cleared due to link down event, Mac XX:XX:XX:XX:XX:XX port 15 VLAN(s) "V_VOICE"
09:15:08.17 port 15 link down
09:15:02.92 Network Login 802.1x user AuthUser logged in MAC XX:XX:XX:XX:XX:XX port 15 VLAN(s) "V_VOICE", authentication Radius
09:14:36.76 port 15 link UP at speed 1 Gbps and full-duplex
09:14:36.45 port 15 is delivering power
Can you help in finding an issue for X440, many thanks.
ColoCopa
Mitel phones Mitel 6865i version 4.0.0.2031, FreeRADIUS, DHCP server
LLDP is not configured on the switches and the phones VLAN is dynamicaly created on the switches after the phones are authenticated
As you can see below,the proccess is succesfull with X150-24t
08:24:38.44 Network Login 802.1x user AuthUser logged in MAC XX:XX:XX:XX:XX:XX port 15 VLAN(s) "V_VOICE", authentication Radius
08:24:37.83 port 15 link UP at speed 100 Mbps and full-duplex
08:24:36.18 Network Login user AuthUser cleared due to link down event, Mac XX:XX:XX:XX:XX:XX port 15 VLAN(s) "V_VOICE"
08:24:36.18 port 15 link down
08:24:32.55 Network Login 802.1x user AuthUser logged in MAC XX:XX:XX:XX:XX:XX port 15 VLAN(s) "V_VOICE", authentication Radius
08:24:03.64 port 15 link UP at speed 100 Mbps and full-duplex
08:23:25.44 Port 24 link UP at speed 100 Mbps and full-duplex
08:23:08.62 port 15 link down
08:23:08.56 port 15 link UP at speed 100 Mbps and full-duplex
With X440-48P,the proccess failed after the link down
09:15:11.01 port 15 link UP at speed 1 Gbps and full-duplex
09:15:08.18 Network Login user AuthUser cleared due to link down event, Mac XX:XX:XX:XX:XX:XX port 15 VLAN(s) "V_VOICE"
09:15:08.17 port 15 link down
09:15:02.92 Network Login 802.1x user AuthUser logged in MAC XX:XX:XX:XX:XX:XX port 15 VLAN(s) "V_VOICE", authentication Radius
09:14:36.76 port 15 link UP at speed 1 Gbps and full-duplex
09:14:36.45
Can you help in finding an issue for X440, many thanks.
ColoCopa
20 REPLIES 20
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
05-12-2016 08:56 PM
I understand what you mean but the authentication has been already achieved. It should be a reauthentication proccess, isn'it?.
And how do you explain that the authentication proccess is ok with the X150-24t version 12.6.5.2?
In addition, when the IP phone port speed and duplex are configured manually, not auto, the authentication proccess is also ok.
Here the WireShark capture with X440
No. Time Source Destination Protocol Length Info
1 0.000000000 :: xxxx::xx ICMPv6 90 Multicast Listener Report Message v2
No. Time Source Destination Protocol Length Info
2 0.002075260 ExtremeN_yy:yy:yy Aastra_zz:zz:zz EAP 68 Request, Identity
No. Time Source Destination Protocol Length Info
3 0.950009584 :: ftgjk :❌fgrt:ghj ICMPv6 78 Neighbor Solicitation for tgjk::111:4ghf:fgrt:ghj
No. Time Source Destination Protocol Length Info
4 1.950093743 tgjk::111:4ghf:fgrt:ghj ff02::2 ICMPv6 70 Router Solicitation from 00:08:5d:zz:zz:zz
No. Time Source Destination Protocol Length Info
5 3.789886559 tgjk::111:4ghf:fgrt:ghj xxxx::xx ICMPv6 90 Multicast Listener Report Message v2
No. Time Source Destination Protocol Length Info
6 3.899921795 Aastra_zz:zz:zz Nearest EAPOL 60 Start
No. Time Source Destination Protocol Length Info
7 3.901700309 ExtremeN_yy:yy:yy Aastra_zz:zz:zz EAP 68 Request, Identity
No. Time Source Destination Protocol Length Info
8 3.902416051 Aastra_zz:zz:zz Nearest EAP 60 Response, Identity
No. Time Source Destination Protocol Length Info
9 3.907678245 ExtremeN_yy:yy:yy Aastra_zz:zz:zz EAP 68 Request, MD5-Challenge EAP (EAP-MD5-CHALLENGE)
No. Time Source Destination Protocol Length Info
10 3.908039760 Aastra_zz:zz:zz Nearest EAP 60 Response, MD5-Challenge EAP (EAP-MD5-CHALLENGE)
No. Time Source Destination Protocol Length Info
11 3.941875391 ExtremeN_yy:yy:yy LLDP_Multicast LLDP 149 TTL = 120 System Description = ExtremeXOS (X440-48p) version 15.6.3.1 v1563b1-patch1-5 by release-manager on Sun Aug 16 21:34:14 EDT 2015
No. Time Source Destination Protocol Length Info
12 4.290546788 ab.cde.fg.h 224.0.0.vv VRRP 64 Announcement (v2)
No. Time Source Destination Protocol Length Info
13 4.919453599 ExtremeN_yy:yy:yy Aastra_zz:zz:zz EAP 68 Success
No. Time Source Destination Protocol Length Info
14 5.295021036 ab.cde.fg.h 224.0.0.vv VRRP 64 Announcement (v2)
No. Time Source Destination Protocol Length Info
15 5.681214681 ExtremeN_ss??ss Broadcast ARP 64 Who has dd.ddd.dd.dd? Tell bc.ddd.ef.gh
No. Time Source Destination Protocol Length Info
16 5.949882530 tgjk::111:4ghf:fgrt:ghj ff02::2 ICMPv6 70 Router Solicitation from 00:08:5d:zz:zz:zz
No. Time Source Destination Protocol Length Info
17 6.299168015 ab.cde.fg.h 224.0.0.vv VRRP 64 Announcement (v2)
No. Time Source Destination Protocol Length Info
18 7.294583006 ab.cde.fg.h 224.0.0.vv VRRP 64 Announcement (v2)
No. Time Source Destination Protocol Length Info
19 8.296729428 ab.cde.fg.h 224.0.0.vv VRRP 64 Announcement (v2)
No. Time Source Destination Protocol Length Info
20 9.300649111 ab.cde.fg.h 224.0.0.vv VRRP 64 Announcement (v2)
No. Time Source Destination Protocol Length Info
21 15.489773934 0.0.0.0 255.255.255.255 DHCP 594 DHCP Discover - Transaction ID 0x68151121
No. Time Source Destination Protocol Length Info
22 21.549736078 0.0.0.0 255.255.255.255 DHCP 594 DHCP Discover - Transaction ID 0x68151121
No. Time Source Destination Protocol Length Info
23 27.609772208 0.0.0.0 255.255.255.255 DHCP 594 DHCP Discover - Transaction ID 0x68151121
No. Time Source Destination Protocol Length Info
24 33.669728308 0.0.0.0 255.255.255.255 DHCP 594 DHCP Discover - Transaction ID 0x68151121
And how do you explain that the authentication proccess is ok with the X150-24t version 12.6.5.2?
In addition, when the IP phone port speed and duplex are configured manually, not auto, the authentication proccess is also ok.
Here the WireShark capture with X440
No. Time Source Destination Protocol Length Info
1 0.000000000 :: xxxx::xx ICMPv6 90 Multicast Listener Report Message v2
No. Time Source Destination Protocol Length Info
2 0.002075260 ExtremeN_yy:yy:yy Aastra_zz:zz:zz EAP 68 Request, Identity
No. Time Source Destination Protocol Length Info
3 0.950009584 :: ftgjk :❌fgrt:ghj ICMPv6 78 Neighbor Solicitation for tgjk::111:4ghf:fgrt:ghj
No. Time Source Destination Protocol Length Info
4 1.950093743 tgjk::111:4ghf:fgrt:ghj ff02::2 ICMPv6 70 Router Solicitation from 00:08:5d:zz:zz:zz
No. Time Source Destination Protocol Length Info
5 3.789886559 tgjk::111:4ghf:fgrt:ghj xxxx::xx ICMPv6 90 Multicast Listener Report Message v2
No. Time Source Destination Protocol Length Info
6 3.899921795 Aastra_zz:zz:zz Nearest EAPOL 60 Start
No. Time Source Destination Protocol Length Info
7 3.901700309 ExtremeN_yy:yy:yy Aastra_zz:zz:zz EAP 68 Request, Identity
No. Time Source Destination Protocol Length Info
8 3.902416051 Aastra_zz:zz:zz Nearest EAP 60 Response, Identity
No. Time Source Destination Protocol Length Info
9 3.907678245 ExtremeN_yy:yy:yy Aastra_zz:zz:zz EAP 68 Request, MD5-Challenge EAP (EAP-MD5-CHALLENGE)
No. Time Source Destination Protocol Length Info
10 3.908039760 Aastra_zz:zz:zz Nearest EAP 60 Response, MD5-Challenge EAP (EAP-MD5-CHALLENGE)
No. Time Source Destination Protocol Length Info
11 3.941875391 ExtremeN_yy:yy:yy LLDP_Multicast LLDP 149 TTL = 120 System Description = ExtremeXOS (X440-48p) version 15.6.3.1 v1563b1-patch1-5 by release-manager on Sun Aug 16 21:34:14 EDT 2015
No. Time Source Destination Protocol Length Info
12 4.290546788 ab.cde.fg.h 224.0.0.vv VRRP 64 Announcement (v2)
No. Time Source Destination Protocol Length Info
13 4.919453599 ExtremeN_yy:yy:yy Aastra_zz:zz:zz EAP 68 Success
No. Time Source Destination Protocol Length Info
14 5.295021036 ab.cde.fg.h 224.0.0.vv VRRP 64 Announcement (v2)
No. Time Source Destination Protocol Length Info
15 5.681214681 ExtremeN_ss??ss Broadcast ARP 64 Who has dd.ddd.dd.dd? Tell bc.ddd.ef.gh
No. Time Source Destination Protocol Length Info
16 5.949882530 tgjk::111:4ghf:fgrt:ghj ff02::2 ICMPv6 70 Router Solicitation from 00:08:5d:zz:zz:zz
No. Time Source Destination Protocol Length Info
17 6.299168015 ab.cde.fg.h 224.0.0.vv VRRP 64 Announcement (v2)
No. Time Source Destination Protocol Length Info
18 7.294583006 ab.cde.fg.h 224.0.0.vv VRRP 64 Announcement (v2)
No. Time Source Destination Protocol Length Info
19 8.296729428 ab.cde.fg.h 224.0.0.vv VRRP 64 Announcement (v2)
No. Time Source Destination Protocol Length Info
20 9.300649111 ab.cde.fg.h 224.0.0.vv VRRP 64 Announcement (v2)
No. Time Source Destination Protocol Length Info
21 15.489773934 0.0.0.0 255.255.255.255 DHCP 594 DHCP Discover - Transaction ID 0x68151121
No. Time Source Destination Protocol Length Info
22 21.549736078 0.0.0.0 255.255.255.255 DHCP 594 DHCP Discover - Transaction ID 0x68151121
No. Time Source Destination Protocol Length Info
23 27.609772208 0.0.0.0 255.255.255.255 DHCP 594 DHCP Discover - Transaction ID 0x68151121
No. Time Source Destination Protocol Length Info
24 33.669728308 0.0.0.0 255.255.255.255 DHCP 594 DHCP Discover - Transaction ID 0x68151121
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
05-12-2016 08:56 PM
The phone will need to send a EAPoL start when using 802.1x. MAC authentication does not require a EAPoL
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
05-12-2016 08:56 PM
After the link comes up again, the phone never sends an EAPoL start to the switch. He goes to an endless DHCP discover. During the DHCP discover,if we manualy configure the VLAN V_VOICE on the port,the phone reauthenticates.
With a PC connected to the phone PC port, the authentication proccess is total success.
With a PC connected to the phone PC port, the authentication proccess is total success.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
05-12-2016 03:32 PM
Does the link go down because the phone is rebooting to send tagged traffic in VLAN v-voice?
Also i would check the netlogin detail configuration to make sure they are configured the same. "show conf netlogin detail"
Also i would check the netlogin detail configuration to make sure they are configured the same. "show conf netlogin detail"
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
05-12-2016 03:32 PM
In addition,the VLAN V_VOICE is configured on the phone in a separate operation. The phone is connected to a switch that doesn't run 802.1X and obtains for the first time its config files from a FTP server after a DHCP proccess.
