Got it

802.1x for PC with voice-vlan

Latest reply: Sep 14, 2020 02:47:31 389 2 0 0 0

Hello! Help to configure the port so that the network for the computer is connected via 802.1x, and the network for the phone on the same port is without 802.1x authorization. Now I have configured the port and the computer connects to the desired vlan and the radius is authorized, the phone also finds the desired network, but cannot register via SIP on the asterisk server. All access is available
Here are my settings on the port:

port link-type hybrid
 voice-vlan 84 enable
 voice-vlan remark-mode mac-address
 port hybrid pvid vlan 131
 port hybrid tagged vlan 84
 port hybrid untagged vlan 131
 stp edged-port enable
 authentication dot1x
 dot1x authentication-method eap
 dhcp snooping enable


Here's what's on the port: I need for the mac address 805e-c00d-2fda, achieve type dynamic rather than authen


MAC Address    VLAN/VSI                          Learned-From        Type
-------------------------------------------------------------------------------
805e-c00d-2fda 84/-                              GE1/0/21            authen
9c7b-ef3a-4883 131/-                             GE1/0/21            authen

I wrote it myself, I decided it myself, you won't get help here.
These are the settings:

port link-type hybrid
port hybrid pvid vlan 131
port hybrid tagged vlan 84
port hybrid untagged vlan 131
authentication mac-authen dot1x
authentication mode multi-share
authentication single-access
dot1x authentication-method eap
lldp tlv-enable med-tlv network-policy voice-vlan vlan 84
View more
  • x
  • convention:

Good post
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.