Thanks Lan for the response. I have set authentication host-mode multi-domain . This time, IP Phone authenticates but the PC on the other hand does not prompt me for username and password at all. Here is my configuration on the fastEthernet port
interface FastEthernet0/10 switchport access vlan 6 switchport mode access switchport voice vlan 200 authentication host-mode multi-domain authentication port-control auto authentication violation protect mab eap dot1x pae both spanning-tree portfast end Also, there no logs generated on the cisco 2960 switch and radius server when runned in debug mode On Thu, Jul 14, 2011 at 8:55 PM, Ian Henderson <i...@ianh.net.au> wrote: > On 15/07/2011, at 3:05 AM, pamela pomary wrote: > > > I want to be able to authenticate the IP Phone via MAC address by-pass > and > > authenticate the PC that connects to the LAN port of the IP Phone via > dot1x > > using authentication host-mode multi-auth. How can I achieve that. > > Use 'host-mode multi-domain' for a phone plus PC. 'multi-auth' is for using > a dumb switch (multiple devices, only one of which will be authenticated to > open the entire port). > > > _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/