Re: VOICE VLANS & 802.1X AUTHENTICATION in 3550 switch

From: Songbin Wei (sbwei_2000@yahoo.com)
Date: Thu Mar 13 2003 - 15:02:34 GMT-3


For voice vlan configuration, we have two options:

1. 'multiple access' port
The concept of 'multiple access' is not in the
documentation yet. But that is the way the port works.
int f0/10
  switchport access vlan 10
  switchport voice vlan 20
Usually an access port can only accept one Vlan. But
for voice vlan, it will create a virtual port which
takes care of dot1q frames. To use dot1x, this is the
only option for voice vlan.

2. dot1q trunk mode
int f0/10
  switchport trunk encap dot1q
  switchport mode trunk
  switchport trunk native vlan 10
  switchport voice vlan 20
This configuration puts the switchport to trunk mode.
But remember that data traffic coming from IP phone is
not tagged (native), so you MUST configure the native
vlan, otherwise the data traffic will be dropped. You
may also need to configured 'switchport trunk allowed
vlan 10,20' so that traffic from other vlans won't be
punted to the IP phone.

--- jfaure@sztele.com wrote:
> Hi all:
>
> We are trying to configure 802.1x port
> authentication in a 3550 port that
> has a voice vlan. You know to support the voice
> vlan and 1 data vlan (if
> you have a cisco 7960 ip phone with 1 pc, connected
> to this 3550 port for
> example) you need to configure the catalyst port as
> a trunk with dot1q.
>
> We have read that it's possible to perform 802.1x
> authentication with voice
> vlan in the 12.1.13EA1 3550 configuration guide.
> However, if you try to put
> the "dot1x port control auto" command in an 3550
> interface configured for
> voice vlan, the system saids that this command isn't
> supported in trunk
> mode.
>
> Do you have tested this subject any time? Any help
> would be apreciated.
>
> Regards
>
>
>
> Juan Faure Ferrer
> email: jfaure@sztele.com
>
> Lmnea de Negocio de Telematica y CC
> Ingeniero de Integracisn de Redes y Sistemas
>
----------------------------------------------------------------------------
>
> SOLUZIONA TELECOMUNICACIONES
> Servicios Profesionales de UNION FENOSA
> Jerez, 3
> 28016 MADRID
> tel 91 579 30 00 fax 91 350 72 83
>
---------------------------------------------------------------------------



This archive was generated by hypermail 2.1.4 : Sat Apr 05 2003 - 08:51:39 GMT-3