02-11-2014 05:40 AM - edited 03-10-2019 09:23 PM
Hello,
I have scenario where I need to change the Data and Voice VLAN on the same port? I mean that if the Data vlan is x, the voice VLAN must be on this port as vlan y.
From the authorization page, I can assign multiple authorization profiles un each configuration line, but how I can change the voice VLAN for the port through the ISE?
Is it supported, or not? I treid to change the VLAN tag, but I'm not sure if this can help.
Thanks.
Ahmad.
02-14-2014 10:03 AM
Use the following link to define the VLAN names, numbers, and SVIs based on known
enforcement states in your network. Create the respective VLAN interfaces to enable routing between
networks. This can be especially helpful to handle multiple sources of traffic passing over the same
network segments
For more information, please go through this link at page no 1095:
http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_ug.pdf
02-14-2014 08:55 PM
It won't be as easy as changing the data VLAN but you might be able to do this via "Auto Smart Port" I am not sure if this would work as I have not tested it but I don't see any reasons why it shouldn't.
12-15-2014 11:39 PM
You can change the Voice VLAN just like the Data VLAN by setting the VLAN variable, but for this to work with telephony devices (including TelePresence), you also need to check the Voice Domain Permission checkbox.
Lastly, don't forget to assign a DACL.
This worked for me in an environment with ISE 1.2 (Patch level 3) and Catalyst 3650 running IOS XE 03.03.05.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide