cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

2771
Views
0
Helpful
3
Replies
Highlighted
Beginner

ISE Dynamic Voice Vlan Assignment using MAB

Hello Everyone,

I've just configured the ISE and the switch to do the authentication for my voice vlan telephones and users. The issue that I'm having is assigning a dynamic Voice vlan for my VTC units

The authentication and authorization is working good with ISE and I'm able to assign the users vlan, but I'm having issues with the voice vlan.

Any help would be appreciated!

Thanks!

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Alex,

We cannot setup more then one voice vlan. Is that what you are trying to achieve?

Do not push any vlan id in the authorization rule. Pushing class=voice attribute will assign vlan 210 (voice vlan) .

Only data vlan should be assigned dynamically.

Hope that helps

Regards,

~JG

Do rate helpful posts

View solution in original post

3 REPLIES 3
Highlighted

Do not push device class=voice attribute for this authorization rule. Only vlan id is needed.

Regards,

~JG

Highlighted

Hi Jag,

 I tried and the voice vlan is not changing.

====Config=====

!
interface GigabitEthernet0/16
 switchport access vlan 153
 switchport mode access
 switchport voice vlan 210
 srr-queue bandwidth share 1 30 35 5
 priority-queue out
 authentication event fail action authorize vlan 225
 authentication event server dead action authorize
 authentication event no-response action authorize vlan 225
 authentication event server alive action reinitialize
 authentication port-control auto
 mab
 mls qos trust device cisco-phone
 mls qos trust cos
 macro description doj-dot1x | doj-dot1x
 dot1x pae authenticator
 dot1x timeout quiet-period 3
 dot1x timeout tx-period 15
 auto qos voip cisco-phone
 spanning-tree portfast
 spanning-tree bpduguard enable
 service-policy input AUTOQOS-SRND4-CISCOPHONE-POLICY
end

==========

Highlighted

Alex,

We cannot setup more then one voice vlan. Is that what you are trying to achieve?

Do not push any vlan id in the authorization rule. Pushing class=voice attribute will assign vlan 210 (voice vlan) .

Only data vlan should be assigned dynamically.

Hope that helps

Regards,

~JG

Do rate helpful posts

View solution in original post

Content for Community-Ad