cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1437
Views
10
Helpful
7
Replies

IP Phone + PC configuration

hi,

i have a very simple connectivity

switch ---- ip phone --- laptop

this is my switch configuration

interface FastEthernet x/x

switchport

switchport mode access

switchport voice vlan 2

dot1x pae authenticator

dot1x port-control auto

dot1x reauthentication

spanning-tree portfast

when i connect my ip phone i am getting to vlan 2 but when i connect a PC to the ip phone i am not getting assigned to any vlan even though i have provided both access and voice vlan there.

Is there any configuration to be done on the switch or ip phone so both my PC and IP Phone get assigned to different vlan. Please help me out i am not able to figure this problem.

this is very urgent.. if any1 can help me out.

Thank,

7 Replies 7

burleyman
Level 8
Level 8

Need to add this line to the interface

switchport access vlan X

X = your data vlan for the pc

Thanks

Mike

Hi,

thanks for the reply.

but i am using 802.1x authentication for the vlan assignment.. so i cant put that command.

anything else which can be done??

Sorry missed that. I am not that up to speed on that but could it be that this command is needed

dot1x multi-hosts

Mike

Yes thats correct ..the command is something like..  "dot1x host-mode multi-host"

Regards,

Ranganath

Depending on what IOS version you are on I think the commands changed to "authentication host-mode multi-domain" or " authentication host-mode multi-host" would work too.  I know thats what I use on my interface commands for 802.1x.  Also I agree that you need the "switchport access vlan x" command as well.

ranraju
Cisco Employee
Cisco Employee

If you want your PC to be in a different vlan, lets call it vlan X...

Then on the interface you need to give the command.. "switchport access vlan X"

You might want to try this and test if the PC works on vlan X.

Hope this helps..

Regards,

Ranganath

ranraju
Cisco Employee
Cisco Employee

Okay this might help:

"When you enable the single-host mode, only one  802.1X client is allowed on the primary VLAN; other workstations are  blocked. When you enable the multiple-hosts mode and an 802.1X client is  authenticated on the primary VLAN, additional clients on the voice VLAN  are unrestricted after 802.1X authentication succeeds on the primary  VLAN."

From the following link:

http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/release/12.1_19_ea1/configuration/guide/Sw8021x.html#wp1051603

Regards,

Ranganath