New Forum system requires email address which you used to apply for your account to replace your original username. Password stays the same.Please see this post for more details
http://forum.yealink.com/forum/showthread.php?tid=40344

Yealink Test Club has been officially launched. Please visit post below to get detail information. Come and join us!
http://forum.yealink.com/forum/announcements.php?aid=18

We just had the YMCS online and we are also working on the features plan on the future versions, in this regard we are need to hear your voice about the YMCS.
Please visit : http://forum.yealink.com/forum/showthread.php?tid=42322


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Yealink T27G Not Working With 802.1x Auth After 3cx v14 to v15.5 Upgrade
Author Message
KM Tire IT Support Offline
Junior Member
**

Posts: 2
Joined: Oct 2018
Reputation: 0
Post: #1
Yealink T27G Not Working With 802.1x Auth After 3cx v14 to v15.5 Upgrade
I originally posted this on the 3cx forum but they pointed me to the Yealink forum. I don't believe this is specifically a 3cx issue but for whatever reason we noticed the issue about 3 weeks after updating 3cx from v14 to v15.5.

I have Yealink T22P, T28P, and T27G phones. The T27G is being setup on a switch that does not have 802.1x setup. After we set it up and take it to it's desk, where 802.1x is setup, the phone won't connect to the network. If I provision an old T28P to the same extension and install it the phone boots and works without issue. If I log into the switch and disable 802.1x the T27G connects and works fine. I've tried the original templates that we've always used and I tried updating the default T27G template that came with 3cx and get the same result.

We are using NPS on server 2016 for the server that auth's phones and pc's. On the NPS server we're seeing the following message. The issue is that all the phones use this account, the configs are the same in each phone template so I'm not sure why only the T27G's does this:

Authentication Details:
Connection Request Policy Name: Use Windows authentication for all users
Network Policy Name: Connections to other access servers
Authentication Provider: Windows
Authentication Server: $domaincontroller
Authentication Type: EAP
EAP Type: -
Account Session Identifier: 3035303045324646
Logging Results: Accounting information was written to the local log file.
Reason Code: 65
Reason: The Network Access Permission setting in the dial-in properties of the user account in Active Directory is set to Deny access to the user. To change the Network Access Permission setting to either Allow access or Control access through NPS Network Policy, obtain the properties of the user account in Active Directory Users and Computers, click the Dial-in tab, and change Network Access Permission.


The switch we're using is a Cisco SF300. The message we see when debugging the port is:

%SEC-W-SUPPLICANTUNAUTHORIZED: username Yealink with MAC <mac address> was rejected on port fa33 due to wrong user name or password in Radius server

I've tried T27G firmware 69.84.0.10, 69.83.0.20, and the original firmware 69.81.0.106.rom. They all have the issue.

In the Template for the 802.1x configs I see the following configs.
network.802_1x.mode = 3
network.802_1x.identity = Yealink
network.802_1x.md5_password = $mypassword
network.802_1x.root_cert_url = %%PROVLINK%%/TrustCertificatesNorton.cer

When I look at the yealink information I see that the commands should be
static.network.802_1x.mode = 3
static.network.802_1x.identity = Yealink
static.network.802_1x.md5_password = $mypassword
static.network.802_1x.root_cert_url = %%PROVLINK%%/TrustCertificatesNorton.cer

Neither of these configs work and I can't seem to find any other configs that would be the problem. Has anyone run into this problem with Yealink's on 802.1x setups?
10-17-2018 12:09 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 


Messages In This Thread
Yealink T27G Not Working With 802.1x Auth After 3cx v14 to v15.5 Upgrade - KM Tire IT Support - 10-17-2018 12:09 PM

Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  T22P Action URI ATrans and BTrans not working? DaveThompson 2 2,707 09-10-2019 10:47 AM
Last Post: DaveThompson
  T22 and firmware upgrade saleh 2 8,024 08-16-2019 01:15 PM
Last Post: justingoldberg
  SIP-T27G no Refresh Display BLF Monitoring When Receiving subsequence Notify cleviton 1 788 05-03-2019 09:56 AM
Last Post: Kamik
  MoH with Yealink T2X Phones Headon_Support 2 8,653 04-19-2019 02:27 AM
Last Post: Helia_Dar
  T27G Load XML Browser URL Error aciacci 0 620 11-14-2018 09:00 AM
Last Post: aciacci
  Call forwarding with SIP devices Yealink and Cisco Call Manager CUCM joao.schlemm 7 7,359 08-03-2018 08:03 PM
Last Post: MarkLReed
Photo Yealink T21P E2 displays VIA and FROM headers on incoming call DmitryTsyganov 1 1,258 07-12-2018 07:28 PM
Last Post: johnkiniston
  Yealink Phones + OpenVPN Ramkumar 0 995 05-28-2018 06:14 AM
Last Post: Ramkumar
  Yealink keep several connections open to outbound proxies DmitryTsyganov 8 4,212 05-07-2018 03:23 PM
Last Post: DmitryTsyganov
  Call Queue not working with the Grandstream UCM6202 ttran 8 6,301 03-04-2018 06:42 PM
Last Post: Adnanka

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication