Got it

IP phone does not work while Connecting IP Phones to Switches through NAC Authentication and Voice VLAN.

Latest reply: Jul 6, 2018 07:39:58 495 1 0 0
Issue Description

IP phone does not work while Connecting IP Phones to Switches through NAC Authentication and Voice VLAN.

After plug out and plug in cable from the phone then IP phone goes in the same stage its showing retrying and not be able to sign in.

Then after implementing this step [switch-aaa]cut access-user user-id 968

Then IP phone comes up.

version: V200R008C00SPC500

Customer follow the product document as below:

http://support.huawei.com/hedex/pages/EDOC1000135317AEG0221R/06/EDOC1000135317AEG0221R/06/resources/dc/dc_cfgcase_ip-voice_0011.html?ft=0&fe=10&hib=12.3.4.1.14&id=dc_cfg_ip-voice_0008_youhua&text=Example%20for%20Connecting%20IP%20Phones%20to%20Switches%20Through%20NAC%20Authentication%20and%20Voice%20VLAN&docid=EDOC1000135317


7bbe8a4f88484897a6a938238006d584

transparent.gif Handling Process

Below is the test step:

<switch>dis access-user interface g 0/0/8

Info: No online user.

plug in the IP Phone.

<switch>sys

Enter system view, return user view with Ctrl+Z.

[switch]dis access-user interface g 0/0/8

 ------------------------------------------------------------------------------

 UserID Username                IP address       MAC            Status

 ------------------------------------------------------------------------------

 956    MISHARI\mkamran         172.15.32.252    6400-6a34-0402 Success

 968                            FE80::625:C5FF:FEDE:8F9B

                                                 0425-c5de-8f9b Success

 ------------------------------------------------------------------------------

 Total: 2, printed: 2

Now, it is online with IPV6 address and not working, so we do below step:

[switch]aaa

[switch-aaa]cut access-user user-id 968

Info: Total 1  user(s) being cut.

===========================================================================


Then display access-user to check the IP phone, it is online with IPV4 address and working fine.


transparent.gif Root Cause

If the terminal sends ipv6 ARP, the switch refreshes the ipv6 table. So we need make it online with IPV4 address.




transparent.gif Solution
Disable IPV6 and it is working fine.

acl number 4001 

rule 5 deny l2-protocol ipv6

traffic classifier ipv6 operator and

if-match acl 4001

traffic behavior ipv6

deny

traffic policy ipv6

classifier ipv6 behavior ipv6


traffic-policy ipv6 global inbound

  • x
  • convention:

KarimUC
Created Jul 6, 2018 07:39:58 Helpful(0) Helpful(0)

good case
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."

My Followers

Login and enjoy all the member benefits

Login

Huawei Enterprise Support Community
Huawei Enterprise Support Community
Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.