topic Can ISE change the voice VLAN dynamically? in Network Access Control

Can ISE change the voice VLAN dynamically?

Ahmad Murad — Mon, 11 Mar 2019 04:23:15 GMT

Hello,

I have scenario where I need to change the Data and Voice VLAN on the same port? I mean that if the Data vlan is x, the voice VLAN must be on this port as vlan y.

From the authorization page, I can assign multiple authorization profiles un each configuration line, but how I can change the voice VLAN for the port through the ISE?

Is it supported, or not? I treid to change the VLAN tag, but I'm not sure if this can help.

Thanks.

Ahmad.

Can ISE change the voice VLAN dynamically?

Ravi Singh — Fri, 14 Feb 2014 18:03:27 GMT

Use the following link to define the VLAN names, numbers, and SVIs based on known

enforcement states in your network. Create the respective VLAN interfaces to enable routing between

networks. This can be especially helpful to handle multiple sources of traffic passing over the same

network segments

For more information, please go through this link at page no 1095:

http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_ug.pdf

Can ISE change the voice VLAN dynamically?

nspasov — Sat, 15 Feb 2014 04:55:54 GMT

It won't be as easy as changing the data VLAN but you might be able to do this via "Auto Smart Port" I am not sure if this would work as I have not tested it but I don't see any reasons why it shouldn't.

You can change the Voice VLAN

Petrus van de Sande — Tue, 16 Dec 2014 07:39:06 GMT

You can change the Voice VLAN just like the Data VLAN by setting the VLAN variable, but for this to work with telephony devices (including TelePresence), you also need to check the Voice Domain Permission checkbox.

Lastly, don't forget to assign a DACL.

This worked for me in an environment with ISE 1.2 (Patch level 3) and Catalyst 3650 running IOS XE 03.03.05.