topic Re: Trunk port, access port and voice vlan workability with 802.1x closed mode in Network Access Control

Trunk port, access port and voice vlan workability with 802.1x closed mode

getaway51 — Thu, 07 Nov 2019 05:56:08 GMT

Hi,

I was wondering if 802.1x works with these 3 interface config. I noticed tht 3 config work in terms of networking concept. But with 802.1x closed mode, some might work some might not. Is there any reason why?

1)interface GigabitEthernet1/0/1

switchport mode access
switchport voice vlan 3

2)interface GigabitEthernet1/0/1

switchport mode trunk
switchport voice vlan 3

3)interface GigabitEthernet1/0/1

switchport mode trunk

Re: Trunk port, access port and voice vlan workability with 802.1x closed mode

Colby LeMaire — Thu, 07 Nov 2019 15:02:53 GMT

802.1x should not be used on trunk ports. Don't do it. And if you search for 802.1x supported on trunk ports, you will see many answers saying no and documentation showing the same thing. Here is just one example:

https://community.cisco.com/t5/policy-and-access/dot1x-on-trunk-port/td-p/2458101

Re: Trunk port, access port and voice vlan workability with 802.1x closed mode

Jason Kunst — Thu, 07 Nov 2019 15:20:40 GMT

@Colby LeMaire wrote:

802.1x should not be used on trunk ports. Don't do it. And if you search for 802.1x supported on trunk ports, you will see many answers saying no and documentation showing the same thing. Here is just one example:

https://community.cisco.com/t5/policy-and-access/dot1x-on-trunk-port/td-p/2458101

Also good to reference the wired guide

https://community.cisco.com/t5/security-documents/ise-secure-wired-access-prescriptive-deployment-guide/ta-p/3641515

Re: Trunk port, access port and voice vlan workability with 802.1x closed mode

getaway51 — Sat, 09 Nov 2019 03:50:20 GMT

Hi,

Is below the best practise switchport config to use for 802.1x activation?

int gix/x/x

switchport mode access

switchport access vlan xx

switchport voice vlan x