Hi Kings, 

That is lab 15 right? I Did that one today. Why is it multi-domain? Shouldnt it 
be multi-host? I finished the lab and I have to review over the solution but it 
just said "If authenticated, pleace it on vlan x". That is all I did. 

Like I said, I have to compare both configs, but I guess if not specified then 
just use the authenticated vlan. 

Mike 
Date: Sun, 6 May 2012 01:39:07 +0530
From: [email protected]
To: [email protected]
Subject: [OSL | CCIE_Security] Dotlx with voice vlan

Hi all

I have never got a chance to try this practically hence theoritically I need 
confirmatioin :-)

 
Ok
 the scenario is that the port f0/15 is carrying both data and voice. 
Now, I need to configure that for dotx and hence I have put in 
"multi-domain" mode.

Now, the PC authenticates and gets the data vlan for the ACS. No issues, it is 
working.

 

What
 about the IP Phone? It just authenticates and starts using voice vlan 
configured on the port or should it also downloaded vlan from ACS.

 

Inputs please...

 

 

interface FastEthernet0/15

description XP PC

switchport access vlan 49

switchport mode access


switchport voice vlan 500

dot1x pae authenticator

dot1x port-control auto

dot1x host-mode multi-domain

dot1x violation-mode protect

dot1x timeout reauth-period server

dot1x max-reauth-req 1


dot1x reauthentication

dot1x auth-fail vlan 490

spanning-tree portfast

 

 

With regards

Kings


_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com                                         
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to