[nsp] dot1x through ip phones and guest-vlan?

[Tomas Daniska]

Hi all,

I'm trying to use dot1x in my company. We use IP phones as host switches
and everything works just nice. The only problem is that once the port
gets into guest-vlan mode (because the client PC is either off or
disconnected), winxp (once reconnected) does not attempt to
reauthenticate. Re-plugging the phone solves the issue (as the port on
the catalyst flaps and the whole dot1x FSM is reinitialized), or manual
reauthentication from IOS shell helps. I am seeking for more convinient
and systematic solution... I know I could set dot1x periodic
reauthentication to something like 60s but I am afraid this would drive
the ACS crazy.


Anybody having their 2c worth here please?


Thanks!

--
 
Tomas Daniska
systems engineer

Tronet, a.s.
Plynarenska 5, 829 75 Bratislava, Slovakia
tel: +421 2 58224111, fax: +421 2 58224199
 
A transistor protected by a fast-acting fuse will protect the fuse by
blowing first.