jskurray

updated

12 years ago

J

jskurray

9 Posts

0

25559

March 31st, 2014 00:00

lldp-med and 802.1x

Hi,

We currently have a few stacks of 7048Ps as our office switches. We have both IP phones and computers, they each have their own individual ports on the switch (so no phone to PC daisy chaining).

Currently we have all the access ports on the same settings:

1. native vlan is data vlan
2. LLDP-MED assigns voice vlan

When a phone is plugged into the switch LLDP-MED assigns it to the voice vlan and when a PC is plugged in it stays on the data vlan.

We're needing to put in 802.1X in the near future and unfortunately our phones don't support 802.1X so I was wondering how these two (802.1X and LLDP-MED) play together and if there's any interoperability.

I realise I could add all the MAC addresses of the phone into AD and use them as MAB access but that's not a particularly appealing option to me. I was wondering if it's possible to still have LLDP-MED assign the voice vlan and allow traffic for a device that doesn't respond to 802.1X requests? How would I do this?

  • jskurray

    9 Posts

    1452

    0

    Posted April 1st, 2014 17:00

    Newer versions of the phone firmware do actually support 802.1X but unfortunately the firmware is managed by our phone server and they haven't updated to support the latest firmware yet, so it's not an option at this point.

    I wanted to avoid having specific phone and computer ports, we want to be able to plug any device into any port and have it work it out.

    Can you tell me how 802.1X and LLDP-MED work together?

  • jskurray

    9 Posts

    1452

    0

    Posted April 1st, 2014 20:00

    And more specifically, if a port is assigned to the guest VLAN from failed 802.1X authentication doest it still assign the voice vlan via LLDP-MED?

  • jskurray

    9 Posts

    1452

    0

    Posted April 30th, 2014 19:00

    I did a fair bit of testing on this and you're 100% correct. I'll have to try to use MAB for our phones instead. A shame but not a huge deal other than the initial output of work.