Our configuration:
- EX4300: dot1x enabled, multiple supplicant
- Sangoma S305: dot1x enables, EAP-MD5 with username and password
- RAIDUS server (PacketFence)
The phone hasn't any authentication problem with 802.1x on Cisco 3560 but It fails on Juniper. The Juniper eap-md5 configuration option is related about mac authentication so enabling is useless (I tried it).
Another voip phone Alcatel (EAP-MD5 username and password) is authenticated by 802.1x on both Cisco and Juniper.
Below log of Sangoma. I don't know how to retrieve more detailed information than dot1x log file.
Sep 11 10:41:17.205555 Task transmit function invoked
Sep 11 10:41:17.205666 EAPOL frame transmitted out on interface (ge-0/0/45.0) auth_disabled 0
Sep 11 10:41:17.207007 EAP packet received on interface 599
Sep 11 10:41:17.207105 Creating background job to process EAPOL frame
Sep 11 10:41:17.207186 Entering background job to process received EAPOL frames rx_frame_node_count=1
Sep 11 10:41:17.207222 pnac_ng_native_vid:243 native vlan 3 of port 599
Sep 11 10:41:17.207247 pnac_bd_tag_lookup 166 3 3
Sep 11 10:41:17.207273 Invoking state machine for frame received on interface ge-0/0/45
Sep 11 10:41:17.207295 Received an EAPOL Frame...
Sep 11 10:41:17.207330 Frame is tagged ...
Sep 11 10:41:17.207365 Frame is targetted to this machine...
Sep 11 10:41:17.207406 pnac_ng_is_native_ifbd_marked_for_deletion:296 native vlan of port 599 NOT-MARKED for deletion
Sep 11 10:41:17.207430 EAPOL Frame Received on Port: 599 supp-mode 2 EapType 120
Sep 11 10:41:17.207463 PAE: Invalid EapolType received
Sep 11 10:41:17.207497 PAE: Dropping the Eapol frame
Sep 11 10:41:17.207540 Processing EAPOL frame failed ...
Sep 11 10:41:17.207775 Processing complete for frame received on interface ge-0/0/45
Sep 11 10:41:17.207812 Deleted background job to process received EAPOL frames
------------------------------
FRANCESCO
------------------------------