09-18-2019 10:32 PM
Hi,
Shld it be "authentication host-mode multi-auth" or "multi-host"?
I am connecting a IP phone and PC via the same port. Voice and data traffic same port.
09-18-2019 10:50 PM - edited 09-18-2019 10:50 PM
With a single IP phone and a single device behind the IP phone, you are looking for
authentication host-mode multi-domain
Multi-auth would allow one client to connect to the voice VLAN and multiple to the data VLAN configured.
Multi-host would authenticate the first host it sees on the port then subsequently allow every other device connected behind the port to access the network without authentication.
09-19-2019 01:05 AM
authentication host-mode multi-domain or multi-auth?
With a single IP phone and a single device behind the IP phone
Which one will work? multi-domain or multi-auth?
09-19-2019 07:48 AM - edited 09-19-2019 07:49 AM
Both will work, but multi-domain would be the best solution for your setup and ensure that only on device on each domain (voice, data) is allowed.
09-19-2019 11:32 AM
Either one will work. Which one you go with depends on whether or not you expect more than one data device to ever show up on a port. I personally like multi-auth because sometimes some devices present multiple MAC addresses and multi-auth still ensures that each MAC address is authenticated before allowing access. Multi-domain is a little restrictive with only allowing one data MAC address. Multi-host should not be used since it isn't secure at all. It only authenticates the first MAC address and then allows all others to communicate without authentication. The only situation that I think of for multi-host is a workstation running VMware and you want to authenticate the host but allow all guest OS's to gain access.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide