Avaya IP Phone not getting IP while Port-Security enable

[atifjauhar1980]

Greetings All,

I am new to Comware Switches. I am facing below issue.

Ports of Comware Switch configured Hybrid with Voice Vlan and Data Vlan. Once we enable Port Security (802.1x). PC working fine as per our scenario (Healthy/Unhealthy/Corporate/Non-Corporate Machine) but IP Phone are not getting IP from DHCP.

Once we remove Port-Security, IP Phone gets IP from DHCP.

Can anyone share configuration with this scenario.

[akg7]

Hi,

Could you pease share the device model and product number along with the current firmware running on the device.

Thank You!

I am an HPE Employee

[atifjauhar1980]

Hi,

As requested, kindly find below requested information:

[Switch]display device verbose
Slot Type State Subslot Soft Ver Patch Ver
1 5130-48G-PoE+-4SFP+ Master 0 3109P07 None
EI
2 5130-48G-PoE+-4SFP+ Standby 0 3109P07 None
EI
3 5130-48G-PoE+-4SFP+ Standby 0 3109P07 None
EI
4 5130-48G-PoE+-4SFP+ Standby 0 3109P07 None
EI

Slot 1 info:
Status : Master
Type : 5130-48G-PoE+-4SFP+ EI
Software Ver : 3109P07
PCB 1 Ver : VER.B
FPGA Ver : 001
BootRom Ver : 132
CPLD 1 Ver : 002
Chip : 0
Learning Mode: IVL
Chip : 1
Learning Mode: IVL

Slot 2 info:
Status : Standby
Type : 5130-48G-PoE+-4SFP+ EI
Software Ver : 3109P07
PCB 1 Ver : VER.B
FPGA Ver : 001
BootRom Ver : 132
CPLD 1 Ver : 002
Chip : 0
Learning Mode: IVL
Chip : 1
Learning Mode: IVL

Slot 3 info:
Status : Standby
Type : 5130-48G-PoE+-4SFP+ EI
Software Ver : 3109P07
PCB 1 Ver : VER.B
FPGA Ver : 001
BootRom Ver : 132
CPLD 1 Ver : 002
Chip : 0
Learning Mode: IVL
Chip : 1
Learning Mode: IVL

Slot 4 info:
Status : Standby
Type : 5130-48G-PoE+-4SFP+ EI
Software Ver : 3109P07
PCB 1 Ver : VER.B
FPGA Ver : 001
BootRom Ver : 132
CPLD 1 Ver : 002
Chip : 0
Learning Mode: IVL
Chip : 1
Learning Mode: IVL

[akg7]

Hi,

You are running with old firmware and I will advise you to upgrade to latest version.

Similar error reported to be resolved into latest version:

• Symptom: An IP phone connected to a port cannot join the voice VLAN configured on the port
even though LLDP for automatic IP phone discovery is enabled.
• Condition: This symptom might occur if the port is configured with a voice VLAN and port
security, and LLDP for automatic IP phone discovery is enabled on the switch by using the
voice-vlan track lldp command.

Also request you to share the configuration which you are configuring here or log a case with us.

ThankYou !

I am an HPE employee

[atifjauhar1980]

Kindly find below cofiguration

# vlan 15

name VOIP

# vlan 26

name ITD #

interface GigabitEthernet1/0/1

port link-type hybrid

undo port hybrid vlan 1

port hybrid vlan 15 tagged

port hybrid vlan 26 untagged

port hybrid pvid vlan 26

undo voice-vlan mode auto

voice-vlan 15 enable

mac-vlan enable

stp edged-port

lldp compliance admin-status cdp txrx

poe enable

poe max-power 3900

undo dot1x handshake

undo dot1x multicast-trigger

dot1x unicast-trigger

mac-authentication max-user 2

mac-authentication domain clearpass

mac-authentication host-mode

multi-vlan port-security port-mode userlogin-secure-or-mac-ext

#

[akg7]

Hi, 

Kindly add below commands under the interface GigabitEthernet1/0/1 then let me know the results

 lldp tlv-enable dot1-tlv protocol-vlan-id 15 
 lldp tlv-enable med-tlv network-policy 15 

Thank You !

I am an HPE Employee

[Brian_Dsouza]

@atifjauhar1980 Can you check if the IP phone MAC  vendor prefix is listed in the MAC-OUI table or not?

[Karol Karkowski]

Hi atifjauhar1980 

Have You found a solution to ypur problem ? 

I have very similar problem with port-security and Avaya phones 

Just let me know if You found a solution, it is importnat to me 

regards

Karol