- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
VLAN assignment for voice-vlan after successfull MAB authentication (ISE)
We use Cisco ISE for authentication off all our devices in the network. We also uses VOIP phones with MAB authentication. After authentication the phone must be switched to the voice-vlan-40 (also using LLDP/CDP)
I need the special AP-pairs from Cisco ISE to set this VLAN.
Does anyone can help me?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I think this might be what you're after?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
.....
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
An approach I have used (very sucesffully) in the past is to assign the VLANs on the switch and only use 802.1x for authentication. You can still override the data VLAN for the user.
This may not quite be what you want - but this works.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can refer to this document for the allow attributes:
The attribute for the data vlan is:
Tunnel-Private-Group-ID
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Voice VLAN / VLAN recognition is working independ of 802.1x RADIUS.
The switch puts the IP-phones automatically to the voice VLAN in my networks. PC´s connected to the phones are running into the user VLAN.