IP phone does not work while Connecting IP Phones to Switches through NAC Authentication and Voice VLAN.

Created: Jul 6, 2018 14:55:48Latest reply: Jul 6, 2018 15:39:58 274 1 0 0
Issue Description

IP phone does not work while Connecting IP Phones to Switches through NAC Authentication and Voice VLAN.

After plug out and plug in cable from the phone then IP phone goes in the same stage its showing retrying and not be able to sign in.

Then after implementing this step [switch-aaa]cut access-user user-id 968

Then IP phone comes up.

version: V200R008C00SPC500

Customer follow the product document as below:

http://support.huawei.com/hedex/pages/EDOC1000135317AEG0221R/06/EDOC1000135317AEG0221R/06/resources/dc/dc_cfgcase_ip-voice_0011.html?ft=0&fe=10&hib=12.3.4.1.14&id=dc_cfg_ip-voice_0008_youhua&text=Example%20for%20Connecting%20IP%20Phones%20to%20Switches%20Through%20NAC%20Authentication%20and%20Voice%20VLAN&docid=EDOC1000135317


7bbe8a4f88484897a6a938238006d584

transparent.gif Handling Process

Below is the test step:

<switch>dis access-user interface g 0/0/8

Info: No online user.

plug in the IP Phone.

<switch>sys

Enter system view, return user view with Ctrl+Z.

[switch]dis access-user interface g 0/0/8

 ------------------------------------------------------------------------------

 UserID Username                IP address       MAC            Status

 ------------------------------------------------------------------------------

 956    MISHARI\mkamran         172.15.32.252    6400-6a34-0402 Success

 968                            FE80::625:C5FF:FEDE:8F9B

                                                 0425-c5de-8f9b Success

 ------------------------------------------------------------------------------

 Total: 2, printed: 2

Now, it is online with IPV6 address and not working, so we do below step:

[switch]aaa

[switch-aaa]cut access-user user-id 968

Info: Total 1  user(s) being cut.

===========================================================================


Then display access-user to check the IP phone, it is online with IPV4 address and working fine.


transparent.gif Root Cause

If the terminal sends ipv6 ARP, the switch refreshes the ipv6 table. So we need make it online with IPV4 address.




transparent.gif Solution
Disable IPV6 and it is working fine.

acl number 4001 

rule 5 deny l2-protocol ipv6

traffic classifier ipv6 operator and

if-match acl 4001

traffic behavior ipv6

deny

traffic policy ipv6

classifier ipv6 behavior ipv6


traffic-policy ipv6 global inbound

  • x
  • convention:

KarimUC  Enthusiast Technician   Created Jul 6, 2018 15:39:58 Helpful(0) Helpful(0)

good case
  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Fast reply Scroll to top