Hello Reeyon, if the phone is in the vlan 188 then it suppose to receive the dhcp option and start to talk on the vlan 122, isn't it ?
Regards Fabrice Le 2016-02-01 00:28, Reeyon Lim a écrit : > Hello Everyone, > > In order to automatically register our Yealink phone in our > environment, we had tested working using vlan_filter.conf method by > filtering its MAC vendor. > Is there any other better way like "Violation" function to detect and > put them into the autoreg list, and will not causing any issue for the > multi-domain VLAN. > > The phone in our environment isn't using LLDP or CDP method to do the > auto-provisioning, but we are using DHCP Option VLAN to do so. > For example: > default vlan 188 (for pc Internet) > voice vlan 122 (for voice) > > ip dhcp pool vlan188 > dhcp option 132 ascii "122" > > *int gi0/48* > switchport access vlan 188 > switchport mode access > switchport voice vlan 122 > authentication host-mode multi-domain > authentication order dot1x mab > authentication priority dot1x mab > authentication port-control auto > authentication periodic > authentication timer restart 10800 > authentication timer reauthenticate 10800 > mab > no snmp trap link-status > dot1x pae authenticator > dot1x timeout quiet-period 2 > dot1x timeout tx-period 3 > spanning-tree portfast > > We had tried to make one Violation rule, auto detect Yealink devices, > and put them autoreg list. > Although it was working as we thought, such as registered Yealink > device, placed them into phones role with the specified VLAN. > > Below is our config in violations.conf > [3500000] > priority=1 > trigger=device::76 > actions=autoreg,role > desc=phones > template=system_scan > auto_enable=N > vlan=default > target_category=voice > enabled=Y > > > The problem we are encountered here is: > 1. DHCP VLAN doesn't work (maybe "violation" rule replace and taking > precedence) > 2. pf forced switchport to vlan188. > > > Regards, > Reeyon > > > > > ------------------------------------------------------------------------------ > Site24x7 APM Insight: Get Deep Visibility into Application Performance > APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month > Monitor end-to-end web transactions and take corrective actions now > Troubleshoot faster and improve end-user experience. Signup Now! > http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140 > > > _______________________________________________ > PacketFence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Fabrice Durand [email protected] :: +1.514.447.4918 (x135) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org)
0xF78F957E.asc
Description: application/pgp-keys
------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
