Hello Everyone,
In order to automatically register our Yealink phone in our environment, we
had tested working using vlan_filter.conf method by filtering its MAC
vendor.
Is there any other better way like "Violation" function to detect and put
them into the autoreg list, and will not causing any issue for the
multi-domain VLAN.
The phone in our environment isn't using LLDP or CDP method to do the
auto-provisioning, but we are using DHCP Option VLAN to do so.
For example:
default vlan 188 (for pc Internet)
voice vlan 122 (for voice)
ip dhcp pool vlan188
dhcp option 132 ascii "122"
*int gi0/48*
switchport access vlan 188
switchport mode access
switchport voice vlan 122
authentication host-mode multi-domain
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer restart 10800
authentication timer reauthenticate 10800
mab
no snmp trap link-status
dot1x pae authenticator
dot1x timeout quiet-period 2
dot1x timeout tx-period 3
spanning-tree portfast
We had tried to make one Violation rule, auto detect Yealink devices, and
put them autoreg list.
Although it was working as we thought, such as registered Yealink device,
placed them into phones role with the specified VLAN.
Below is our config in violations.conf
[3500000]
priority=1
trigger=device::76
actions=autoreg,role
desc=phones
template=system_scan
auto_enable=N
vlan=default
target_category=voice
enabled=Y
The problem we are encountered here is:
1. DHCP VLAN doesn't work (maybe "violation" rule replace and taking
precedence)
2. pf forced switchport to vlan188.
Regards,
Reeyon
------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
