02-08-2011 11:10 AM - edited 03-06-2019 03:25 PM
hi,
i have a very simple connectivity
switch ---- ip phone --- laptop
this is my switch configuration
interface FastEthernet x/x
switchport
switchport mode access
switchport voice vlan 2
dot1x pae authenticator
dot1x port-control auto
dot1x reauthentication
spanning-tree portfast
when i connect my ip phone i am getting to vlan 2 but when i connect a PC to the ip phone i am not getting assigned to any vlan even though i have provided both access and voice vlan there.
Is there any configuration to be done on the switch or ip phone so both my PC and IP Phone get assigned to different vlan. Please help me out i am not able to figure this problem.
this is very urgent.. if any1 can help me out.
Thank,
02-08-2011 11:31 AM
Need to add this line to the interface
switchport access vlan X
X = your data vlan for the pc
Thanks
Mike
02-08-2011 11:39 AM
Hi,
thanks for the reply.
but i am using 802.1x authentication for the vlan assignment.. so i cant put that command.
anything else which can be done??
02-08-2011 11:48 AM
Sorry missed that. I am not that up to speed on that but could it be that this command is needed
dot1x multi-hosts
Mike
02-08-2011 12:01 PM
Yes thats correct ..the command is something like.. "dot1x host-mode multi-host"
Regards,
Ranganath
02-08-2011 12:30 PM
Depending on what IOS version you are on I think the commands changed to "authentication host-mode multi-domain" or " authentication host-mode multi-host" would work too. I know thats what I use on my interface commands for 802.1x. Also I agree that you need the "switchport access vlan x" command as well.
02-08-2011 11:48 AM
If you want your PC to be in a different vlan, lets call it vlan X...
Then on the interface you need to give the command.. "switchport access vlan X"
You might want to try this and test if the PC works on vlan X.
Hope this helps..
Regards,
Ranganath
02-08-2011 11:54 AM
Okay this might help:
"When you enable the single-host mode, only one 802.1X client is allowed on the primary VLAN; other workstations are blocked. When you enable the multiple-hosts mode and an 802.1X client is authenticated on the primary VLAN, additional clients on the voice VLAN are unrestricted after 802.1X authentication succeeds on the primary VLAN."
From the following link:
Regards,
Ranganath
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide