cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1844
Views
0
Helpful
3
Replies
Highlighted
Beginner

ACS 5.2 Dynamic VLAN assignment - voice vlan issue

Hello,

When I want to configure the Voice VLAN assignment through ACS, I go to Policy Elements> Autorizations and Permissions> Network Profiles then on the common task page select Voice VLAN > Static as per the picture below

untitled.bmp

Then configure configure the VLAN ID > Static > VLAN_number

But this only enables the Voice VLAN and set it to the VLAN_number, the DATA VLAN will remain unchanged and not configured.

So my question is, is there a way to configure both the voice (and enable it) AND the DATA VLAN?

i tried to manually add RADIUS attributes for a second VLAN but it is not allowed.

Any idea?

Regards,

Thibault.

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ACS 5.2 Dynamic VLAN assignment - voice vlan issue

Hi Thibault,

Why would you like to configure both data and voice on the same authorization profile?

If this config is to be used for a MDA (Multi-domain) config on the switch, then take into account that the IP phone and the data client will have to go through separate authentication sessions.

Given this, you should rather configure two different autz profiles and configure different rules in the authorization policy that apply the "voice" profile to the IP phones and the "data" profile to the data clients.

I hope this answers your question.

Regards,

Federico

--

If this answers your question please mark the question as "answered" and rate it, so other users can easily find it.

View solution in original post

3 REPLIES 3
Cisco Employee

Re: ACS 5.2 Dynamic VLAN assignment - voice vlan issue

Hi Thibault,

Why would you like to configure both data and voice on the same authorization profile?

If this config is to be used for a MDA (Multi-domain) config on the switch, then take into account that the IP phone and the data client will have to go through separate authentication sessions.

Given this, you should rather configure two different autz profiles and configure different rules in the authorization policy that apply the "voice" profile to the IP phones and the "data" profile to the data clients.

I hope this answers your question.

Regards,

Federico

--

If this answers your question please mark the question as "answered" and rate it, so other users can easily find it.

View solution in original post

Beginner

Re: ACS 5.2 Dynamic VLAN assignment - voice vlan issue

Hello Frederico,

Actually your right, it's not a config issue, it's an approach issue.

Thanks a lot for your answer.

Regards,

Thibault.

Hello, how can i configure my

Hello,

 

how can i configure my authorization profile to get one tagged vlan and on untagged vlan when i connect my ip-phone ?

 

i want to connect an pc directly to the phone ? so i need one tagged port for voice and one untagged vlan for data.

 

is this possible ?

 

thanks

 

regards