Guest

Preview Tool

Cisco Bug: CSCus48540 - 6901 ip phone not registering to CUCM with 802.1x authentication

Last Modified

Jun 19, 2017

Products (36)

  • Cisco Unified IP Phone 6900 Series
  • Cisco Unified Wireless IP Phone 7920
  • Cisco Unified IP Phone 7971G-GE
  • Cisco Unified IP Phone 7962G
  • Cisco Unified IP Phone 7945G
  • Cisco Unified IP Phone 9951
  • Cisco Unified IP Phone Expansion Module 7914
  • Cisco Unified IP Phone 7911G
  • Cisco Unified IP Phone 7941G
  • Cisco Unified IP Phone 6901
View all products in Bug Search Tool Login Required

Known Affected Releases

9.3(1)

Description (partial)

Symptom:
6901 phones does not authenticate EAP TLS  using dot1x (does not respond to TLSv1 hello&certificate message).
CUCM  in secure mode and with 802.1x authentication enabled.
We could see 'EAP 60 Failure' from the phone sniffer capture. The server certificate size is small and the 802.1x code is not handled well.

There are already 2 known defects with 6901.
CSCun05383 - Certificate size is too small on 6901 phones for 802.1x Authentication
CSCue13542 - 802.1x Authentication failure on 6901 phones - SIP Firmware

These defects are fixed in SIP69016901.9-3-1-es6 firmware, but this is not working even after upgrading to ES6.

Conditions:
6901 ip phones with 802.1x authentication enabled.
Firmware : 9-3-1-ES6 and lower.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.