Hello,
I just received several N3048P switches for our access layer and 2x 4048-ON for our core layer. The N3048P's are VLT'd between the two 4048's. There are 4x N3048P's stacked together. The 4048's own all the gateways via VRRP.
I have 802.1x working with my test Windows client, and I can get the phone (Cisco 7941) to acquire a DHCP address if I put it on a "switchport mode access" port. However, if I change the port to a general port with voice vlan enabled and 802.1x, the phone does not get a DHCP address, but the PC attached to the phone still gets a DHCP address in the correct VLAN.
I see CDP and LLDP messages being exchanged via Wireshark, and it looks like the phone and the switch are exchanging the Voice VLAN correctly.
My question is, why can the phone not get a DHCP address?
Here is the relevant config from the switch below. I realize some of the config may be duplicate for troubleshooting measures:
vlan 75
name "Test"
exit
vlan 76
name "Test_Phones"
exit
ip helper-address 1.1.1.3 dhcp
ip helper-address 1.1.1.4 dhcp
interface vlan 75
ip address 172.16.75.4 255.255.255.0
ip helper-address 1.1.1.3
ip helper-address 1.1.1.4
exit
interface vlan 76
ip address 172.16.76.4 255.255.255.0
ip helper-address 1.1.1.3
ip helper-address 1.1.1.4
aaa authentication login "defaultList" local
aaa accounting dot1x default start-stop radius
dot1x system-auth-control
aaa authentication dot1x default radius
aaa authorization network default radius
voice vlan
radius-server source-ip 172.16.75.4
radius-server key "key"
radius-server host auth 1.1.1.1
primary
name "rad1"
usage 802.1x
key "key"
exit
radius-server host auth 1.1.1.2
name "rad2"
usage 802.1x
key "key"
exit
radius-server host acct 1.1.1.1
name "rad1"
exit
radius-server host acct 1.1.1.2
name "rad2"
exit
interface Gi2/0/1
description "802.1x client port"
spanning-tree portfast
spanning-tree guard root
switchport mode general
switchport general allowed vlan add 75-76 tagged
dot1x reauthentication
dot1x timeout quiet-period 5
dot1x timeout tx-period 5
dot1x guest-vlan 20
dot1x unauth-vlan 20
lldp transmit-tlv sys-desc sys-cap
lldp transmit-mgmt
lldp notification
lldp med confignotification
voice vlan 76
voice vlan auth disable
exit
Thank you for any input you may have. Let me know if there is any other information I can provide.
-Jason