09-11-2018 07:00 PM - edited 09-11-2018 07:02 PM
Currently, the SW is a LAN LITE model and only supports single host mode
Using single-host mode,
If it is connected as shown below
SW -> (single-host mode setting, mab, dot1x authentication setting)
|
|
IP Phone -> (mab authentication, specific vlan assignment)
|
|
User PC -> (dot1x authentication, VLAN assignment according to user ID / PW)
As a result,
Using single-host mode, I wonder if both the phone and the user's PC can be authenticated.
09-11-2018 08:39 PM
09-12-2018 05:30 PM
The current lan lite model is WS-C2960X-24TS-LL. The authentication methods are single-host, multidomain, and multi-host.
It is the second site to build using WS-C2960X-24TS-LL model.
The site that we built the first time used the multi-auth authentication method using the Lan base-based model to authenticate the phone and the user's PC.
First, the lan base model of the site that we built has been tested with multi-host authentication method, and the authentication process with the desired condition could not be performed.
So I chose Multi-auth, and the lan lite device of the second building site did not support multi-auth, so I chose single-host.
When connecting to a single host, the IP phone receives mab authentication processing and allocates a specific vlan band, and the IP phone can not handle the dot1x authentication processing sent from the SW
I wonder if the authentication process is done by bypassing to the user pc side.
09-12-2018 08:10 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide