ISE Voice Vlan a dynamic assignment using MAB

Hi all

I just configured the ISE and the switch for voice authentication for my phones vlan and users. The issue I'm having is attribution a vlan dynamic voice for my VTC units

Authentication and authorization works well with ISE and I am able to assign the vlan users, but I have problems with the vlan voice.

Any help would be appreciated!

Thank you!

Alex,

We cannot install several VLANs can one voice. -What are you trying to achieve?

Do not push no matter what id vlan in the authorization rule. By pushing the class = attribute voice will assign vlan 210 (vlan voice).

Only the vlan data should be assigned dynamically.

Hope that helps

Kind regards

~ JG

Note the useful messages

Tags: Cisco Security

Similar Questions

  • Dynamic assignment of VLANS / SSID using the IAS 4402/MS

    Greetings,

    In short, we have a WLC4402 (50 AP license) and about 30 1252 s towers in place. At the moment we have three VLANS / SSID in place - one for admin, to teachers and students. The WLC uses a server for MS Windows 2003 running IAS for PEAP authentication. Windows XP, the SSID clients entered manually based on "prior designation" 'type' laptop (admin, teacher or student).

    It works very well. However more frequently our users were 'sharing' portable computers so a student can need to use his laptop computer and vice versa. In short, we would like to use the dynamic assignment of VLANS / SSID as well as if a student has the teacher, 'students' laptop VLAN / SSID would receive them when connect (and apply the appropriate ACL, QoS policies, etc.)

    We have found the documents on how to do that with a CBS, but is there something available for this configuration with a MS IAS server.

    All entry information would be greatly appreciated.

    Joe

    The installer works fine with the Server IAS Ms. You must set the options for RADIUS (3 of them) which are documented in the ACS similar article of the same ilk. You can have one SSID, using RADIUS authentication and have the Active Directory to determine the membership to a vlan based on the group.

    The RADIUS attribute parameters are

    Tunnel-Type = Vlan

    Tunnel-Pvt-Group-ID = vlanid

    Tunnel-Medium-Type = 802

    I also like to set

    Ignore-User-Dialin-Properties = True

    You must create some policies in IAS to match your windows groups and set the id vlan correct. A separate policy of IAS by vlan.

    Set the attributes RADIUS by political IAS and ad group or however you plan on the determination of the membership.

    If you want to use RADIUS for administration, you must also define a separate policy that defines the RADIUS of the Service Type administrative = attribute

    Jim

  • Need help to set up voice VLAN in SG300

    Hello

    I spent too much time on it now and need help. I'm trying to set up a voice switch VLAN on a SG300 - 28 p. I need to charge a phone Cisco 7965 connected to a port on SG300 - 28 p to use VLAN 100, and a workstation connected to the phone to use Cisco 7965 on VLAN 101 by SG300 - 28 p. In the common Cisco IOS switches, this task is configured as follows:

    interface gi25

    switchport mode access

    switchport access vlan 101

    switchport voice vlan 100

    Trying to achieve this scenario with a Cisco SG300 switch turns into a nightmare. You will have to deal with a Dynamic of VLAN voice Auto Voice VLAN mode. Then, you must have a configured trigger and activated Automatic Smartport . I tried to do this in CLI nothing helps. Cisco 7965 receives an IP address of the access VLAN on Gi15 interface, which is 101 VLAN. I need to receive an address IP of the VLAN 100.

    The current configuration under Gi15 interface is as follows:

    interface gigabitethernet15

    activate the storm control

    broadcast storm control level kbit/s 10

    Storm-control include multicast

    port security throw trap 60

    maximum port security by 10 points

    port security mode max-addresses

    spanning tree portfast

    LLDP-med disable

    switchport mode access

    switchport access vlan 101

    ! next order is internal

    macro auto smartport dynamic_type unknown $native_vlan 101 $voice_vlan 100

    Now, I don't know how the macro auto smartport dynamic_type unknown $native_vlan 101 $voice_vlan 100 command in the config, and I do not know how to remove it.

    When I try to enter the command macro auto smartport type ip_phone_desktop under Gi15 interface, I get the following error message:

    The $voice_vlan macro setting is not configurable by the user

    It seems that the auto attendant smartport macro ip_phone_desktop can not apply the setting $voice_vlan with a value of 100. In fact, I explicitly does not use this parameter to everything in the order of macro auto smartport type ip_phone_desktop ; However, the SG300 switch knows that the voice VLAN VLAN 100, and he's trying to use this VLAN ID as the value of the $voice_vlan parameter, the macro fails.

    I tried statically configure the voice VLAN on the switch SG300 using the command id of the vlan 100 voice , but I couldn't get the ip_phone_desktop macro to configure interface Gi15 correctly. Then, I removed the command id of the vlan 100 voice and obtained SG300 to learn his voice VLAN ID of UC560 connected to the SG300 through a trunk port based on the port configuration (connected to SG300) for the trunk of the next UC560:

    switchport trunk vlan 101 native

    switchport mode trunk

    switchport voice vlan 100

    Cisco-switch macro description

    This is the command switchport voice vlan 100 who announces to SG300 via CDP VLAN 100 is a voice VLAN. When I run the command show vlan local VoIP on the SG300, I get the following result:

    VLAN ID - VPT DSCP Source MAC address Interface

    1                    5          46       default           ----                    ---

    * 100 CDP e0:5f:b9:xx:yy:zz gi28

    Thus, it is clear that the SG300 receives information from UC560 via CDP in port Gi28 VLAN 100 is the voice VLAN. However, I can not always apply the ip_phone_desktop macro to SG300 Gi15 interface.

    Also, I tried to set up vState ofoithis vlan auto-déclenché as well as the commands in global configuration State vlan automatic voice activated mode. Or setting changes anything view voice VLAN announced at Cisco 7965 where Cisco 7965 continues to use VLAN101 (access the VLAN assigned to the interface Gi15).

    Hello telecastle,

    The Macro just get in the way most of the time. A default state on the switch a user will set the id of the vlan voice with orders

    (config) #voice vlan id 100

    * This will create the vlan 100

    VLAN, VoIP? * You can use to change your defaults for dscp and cos a long with all the other settings.

    State of vlan (config) enabled automatic #voice

    (config) #interface rank fa1-24

    (config-if-range) #switchport trunk vlan 101 native

    trunk (config-if-range) #switchport allowed vlan add 100

    * This function will define the vlan native on the trunk to 101 for the data port and vlan tagged will be 101 for the voice.

    CDP is enabled automatically and should learn the features of the phone and get on the phone to the vlan 101 on this port.

    CDP of the UC should automatically fill in the switch of the SG. You may need to upgrade the switch to the latest firmware however. Also make sure that the DHCP server for the voice if the CPU must be configured accordingly.

    Let me know if this helps.

    Cisco Small Business Support Center

    Randy Manthey

    CCNA, CCNA - security

  • Having trouble getting the voice VLAN on the switch X1052P to work at all

    Can someone help me understand how to set up the voice VLAN X1052P? I spent several hours trying to get this working and it does not work. I spent about 4 hours on the phone with a Dell technician that night and he couldn't get it to work and finally gave up. He told me that I had to spend my warranty to ProSupport because he did not know how to solve the problem. What group of *. It's a simple configuration of VLAN. What must be so picky about? In any case...

    Setting up the VIRTUAL LAN must be fairly simple, but apparently on this switch is not. The user guide page 406 is not very useful except explaining what the different options. I must admit I am not an expert VLAN so I dunno I've misconfigured something. But remember, Dell technology could not operate either.

    Here's my situation... I have VoIP phones on my network connected to a network wall jack. Connected to phones are my computers of users. The computer of the user and its respective VoIP phone, both share the same data cable. Before replacing Cisco managed Internet service provider spend all it worked well. The problem is that they had direct access to our network so I removed the switch and installed the X1052P in its place. I talked to the ISP to let them know what I'm doing and they said everything I had to do was setup VLAN ID: 15 for the voice VLAN because this is the VLAN ID that the router uses to route telephone traffic. Router PSI is also the server DHCP VLAN 15 and issues IP for phones using 172.27.0.0/24 with a DHCP 172.27.0.50 range - 150.

    I tried to configure the switch using parameters of VLAN static and settings VLAN voice and neither one also seems to do what I want it to do.

    Network administration > VLAN > VLAN static

    Network administration > VLAN > Voice VLAN

    I activated the profile 'phone' on ports I want to added to the voice VLAN and it does not work. Moreover, 47 the switch port is connected directly to the ISP router and is configured as a trunk with the default port VLAN 1 unidentified and tag VLAN 15. For other ports I tried the general implementation, access and trunk of the parameters on each port to see if I could get something going and still nothing happens. When I set up the ports as General ports VLAN, I made adding VLAN VLAN 1 and VLAN 15 as a VLAN tagged not marked. It still does not.

    This is the short story from where I am now. Any help is greatly appreciated.

    FYI, as a follow up I finally solved the problem. I hope this information helps someone else that can encounter the same problem.

    After buying the ProSupport warranty upgrade ($121 out-of-Pocket mind you) and addressing a total of 4 technicians ProSupport expert technician a 3rd another level (only available via chat message between one of the ProSupport phone technicians and the 3rd Tier expert tech - i.e. I couldn't talk or chat with this person me) the consensus was that the material must be bad. When I bought the X1052P I bought two of them, so the best way to know if it was a bad switch was simply configure the other switch and see if the behavior occurs on this one, too. Well, this switch also restarted each time I assigned the profile 'phone' to more than 13 or 14 ports in the switch. It seems that it was not a hardware problem after all.

    I went back to the switch original and tried new things hoping that I could fall on a solution and it turns out that the solution was NOT to use the voice VLAN on the switch. It does not work!

    SOLUTION: I set the VLAN ID: 15 manually and no has not assigned any phone profiles to one of the ports. This is how I solved the problem.

    So he has bad software on the switch. I tried to see if there are updates of the firmware on the Dell support site, but there is none. Configure manually the phone VLAN was the solution. What a freaking nightmare which turned out to be. Maybe someone in Dell could note this problem and test in-house. And, if you want to compensate me for the 20 + hours I spent working on this problem, which has be great, too.

  • PC8024 interface with existing voice VLAN (100) on the switches HP 2910

    We have added our first Dell PowerConnect 8024 switch to an existing network of switches HP 2910.  We have only 2 VLANS configured: voice (100) and default (1).  The switches HP all default ports VLAN are set to "no label" and all the ports on the voice VLAN are established 'labelled '.

    I need to configure the PC8024 to co-exist with the existing network phones for Mitel can communicate.  We are not familiar with the PC8024 switch, evaluate as a possible solution for improving our spine and DR subnet 1 GB to 10 GB.  For the spine, we need the voice traffic to be handled properly, so we set up the work with the existing voice VLANS 8024.

    What parameters of configuration of VLAN do we need on the PC8024 to co-exist with the existing network configuration for the (100) voice VLAN on HP switches?

    Voice VLAN allows you to specify which VLANs, then you should be able to use the VLAN 1, but if you use VLAN 1 and 100, you could probably just create a VLAN 100 and not bother with the stuff of vlan voice. What type of port is the port you are trying to assign to tagged in? Access mode cannot do without label. If it was the general mode you can assign it labeled 100 and a PVID from 1 which would put traffic which is not marked on the vlan 1.

  • There is no command 'Switchport Voice Vlan"on SF300 - 24 p!

    Hello everyone

    I am in an urgent problem: S

    I have a small business SF300 - 24 p

    I created two vlans one data and one voice

    but I have not assigned to ports and I do not know how, because there is no command ' switchport voice vlan "under the interface!

    Here are the configurations

    BTW the switchport mode is always trunk as it is by default

    Thanks in advance

    switch0a1172 #.

    switch0a1172 #.

    switch0a1172 #sho run

    config-file-header

    switch0a1172

    v1.2.9.44 / R750_NIK_1_2_584_002

    CLI v1.0

    SSD of encrypted file indicator

    @

    SSD-control-start

    config of SSD

    control of password file unrestricted SSD

    no control of the integrity of the file ssd

    SSD-control-end cb0a3fdb1f3a1af4e4430033719968c0

    !

    database of VLAN

    VLAN 13.20

    output

    ID of the vlan 20 voices

    Add a voice vlan Yes-table 0001e3 Siemens_AG_phone___

    Add a voice vlan Yes-table 00036 b Cisco_phone___

    Add a voice vlan Yes-table 00096e Avaya___

    Add a voice vlan Yes-table 000fe2 H3C_Aolynk___

    Add a voice vlan Yes-table 0060 b 9 Philips_and_NEC_AG_phone

    Add a voice vlan Yes-table 00d01e Pingtel_phone___

    VLAN voice Yes-table add Polycom/Veritel_phone___ 00e075

    Add a voice vlan Yes-table 00e0bb 3Com_phone___

    hostname switch0a1172

    username, encrypted password cisco c8e383b1dd7be99f878a387d87766e875404e0b3 priv

    LG 15

    The telnet server IP

    !

    interface vlan 13

    name "VLAN13".

    !

    interface vlan 20

    VOICE name

    !

    switch0a1172 #.

    It does it automatically via the port smart auto based on external trigger default. Devices to enable CDP and LLDP are supported.

    -Tom
    Please mark replied messages useful

  • LLDP Voice VLAN

    I'll put up a D40 Digium Switchvox PBX phones and switches Cisco SG200.  The PBX is no not any COP or LLDP pub so I don't expect the switch to automatically determine the voice VLAN ID and I need to manually set.  How can I configure the switch manually to publis the voice VLAN via LLDP-MED?  I've been tinkering for hours and may not include the TLV voice in packets.  Be able to help?

    Thanks in advance,

    Paul

    At the present time, my switch is configured by default vlan 100 and all ports as 100u. When you connect a phone to any port, it is dynamically assign the vlan 1. Also note that I created the vlan 1.

    -Tom

  • VLAN Public IP assignment

    Hello everyone;

    Overview:

    My ISP I provided more than IP address public block i.e. (192.158.13.1/24, 192.158.14.1/24) that I would attribute to my (Citrix XenServer) hypervisor via vLAN isolation & make available to my VMs to directly acquire public IP addresses.  (it's actually a requirement of the network I want to put in place).

    I would like to know if this scenario is possible to implement via Dell 6224 L3 Switch.

    Network configuration:

    -My ISP gave me a link power to my cart I use (I can assign any intellectual property of these two different blocks) which gave me.

    -Currently the ISP link will my Dell Power Connect 6224 L3 Switch port 24 then will my port of XenServer 15 box

    -J' got number of VLAN configuration of the switch which are represented on the XenServer port 15 so is trunk port.

    What I try to do

    Since all virtual machines requires public IPs.

    1. the Dell switch creating VLAN 10 & 20 2

    2 assign the public ip address to each vlan

    3. create rule of road on the foreword traffic crossing to the ISP router

    4. Add the vLAN 10 & 20-port 15 so my XenServer hypervisor can see incoming traffic.

    My current status

    I am unable to do this work in that order, can anyone advice if the idea is correct the task or I have to design a different solution to work.

    S1l if I go ahead and configure the general mode on port 1/g24 (I created VLAN local tag v10 & v20 instead of the ISP provided vlan ID). (correct?)

    I would change your VLAN ID to match that those who use the access provider. If you set the general mode and tag VLAN 10 and 20, the port will send packets containing the tag according to the VLAN they came. But if the Cisco device does not know these VLANs, when it receives VLAN tagged packets, he used to know what to do with them.

    So if said PSI on the cisco 192.158.13.1 device belong to VLAN 110, then on the 6224 change VLAN 10 to 110 of VLAN. so now that the port sends the packets marked to the Cisco, Cisco sees a package labeled for VLAN 110, Cisco has a VLAN 110 and he continues to pass the package on this VLAN.

    T2 the command ip route 192.158.13.0 255.255.255.0 192.158.13.1 will forward traffic to vlan 10 outside via the 24 port because there vlan 10 tag. (correct?)

    Because we use a general/trunk connection, the static route cannot even necessary on the 6224. The static route is used to help guide traffic to the next network hop. I set up without the static route first and see if you have connectivity. If this isn't the case, then look at the network settings on clients that connect to the switch.

    Devices in VLAN 10

    192.158.13.x = IP address

    Default gateway = 192.158.13.1

    Devices in VLAN 20

    192.158.14.x = IP address

    Default gateway = 192.158.14.1

    Then, if still no try connection adding static routes.

    Part of getting this work may come down to trial and error. It's always a little unusual that there is no other device between the 6224 and your ISP. PSI enjoys these cisco devices located in the building in which your material resides

  • Voice VLAN help please

    My client has 2 SG300 - 52p and 5 SG300 - 28 p. We have installed a VoIP telephony system earlier this year. At the time of installation, we placed the phone on the native VLAN 1 System. Now, they want to pass the phone system to a new VLAN, because their class C subnet is running out of addresses. DHCP is managed by their Active Directory and their router/firewall is a box to sort out. The SG300 switches have a basic configuration only.

    To move the phone system to a new VLAN, I created 20 VLAN on each switch. I then turned on VLAN auto voice. I have all the ports on each switch setting on the trunk. Computers are plugged into the back of the phone. I then created a virtual interface in the box to unravel for VLAN 20. Box unravel also manages DHCP to the new VIRTUAL LAN. Active Directory is always manage DHCP for VLANS native.

    I ping from each switch to the bridge of the new VLAN. Since each computer I can ping the gateway and on the new LAN VIRTUAL phone system. However, phones will not seize an address on the VIRTUAL LAN and when they have the static value, they cannot communicate with other devices on the VIRTUAL LAN.

    Any help would be much appreciated. I don't know what I'm on.

    Here is an example of part of a switch configuration to work with Zultys phones where voice VLAN is 100 and data VLAN 10:

    database of VLAN
    VLAN 10,20,100
    output
    ID of the vlan 100 voices

    interface fastethernet1
    Description "RCP and voice."
    switchport trunk allowed vlan add 100
    trunk switchport vlan 10 native
    !
    interface fastethernet2
    Description "RCP and voice."
    switchport trunk allowed vlan add 100
    trunk switchport vlan 10 native

    In your case, you need a trunk port with 20 VLAN Tag on your firewall (or an access port to a separate physical port on VLAN 20.  The default gateway served on the phone (or put statically) should be the interface on intellectual property.  Then, you can also allow routing inter - vlan for admin access or MXIE if you use.

    One thing to note on Zultys is by default I think the device profile disables LLDP, but on phones, it is enabled out of the box.  For the first time that a phone downloads its config from the Zultys it can turn of LLDP unless you have checked the box to keep it on.

  • SG200 - 50 p, SG300 - 28 p phone YES Voice VLAN

    Hey guys,.

    I'm having a problem with the YES voice of VLANS on SG200 - 50 p, SG300 - 28 p, layer 2 Mode. Firmware 1.3.7.18.

    Enabled on a port all the ports PVID unlabeled said no marked traffic is blocked.

    Example:

    Data VLAN 10 - 192.168.10.0/24

    Voice VLAN 100 - 192.168.100.0/24

    Configuration of Vlan voice and YES added and enabled on ports.

    All Ports configured as trunk Type.

    Example 1:

    Members Table shows that:

    Port 1 - 10UP

    2 port - 10UP

    YES disabled: 2 laptops connected to ports 1, 2, traffic passes.

    YES Enabled: 2 laptops connected to ports 1, 2, traffic blocked on VLAN10.

    Example 2:

    1 - 10UP, 100 tons of port

    2 port - 10UP

    Port 3 - 10UP

    YES Enabled: 2 laptops connected to the ports 2,3, blocked traffic on VLAN10.

    1 phone connected to channel 1, the phone connects.

    So it's using, but for some reason any the vlan untagged on that port is blocked when the YES is enabled.

    I have installation this scenario on many switches cisco small business before and it works very well, so I wonder is this a firmware issue? or am I just being stupid and something wrong?

    Thanks for any help you can provide! :)

    Hi Vladimir,.

    It's something about Cisco still working. You are more than welcome to open the ticket with us and contribute actively. At this point, the only solution is to sue 1.3.5 firmware which does not show this problem.

    http://www.Cisco.com/c/en/us/support/Web/TSD-Cisco-small-business-suppor...

    Kind regards

    Aleksandra

  • problem with dhcp Cisco sg200 voice vlan

    I have cisco sg200 50 p connected to the switch cisco 3750. I just wanted to separate voice (vlan2) and data (vlan1) VLAN. I created vlan 2 as my voice VLAN and separate dhcp server for vlan 2 to give IPS for phones. However the phone ip connected to my voice vlan (vlan 2) does not receive the ip address of my dhcp server vlan 2.

    the dhcp server is connected to a switch with an access port (vlan2-voice) 3750

    two switches are connected through the trunk ports and allowed vlan 1 & 2

    IP phone is connected to sg200 via the access port (vlan 2).

    Note: there is a pc connected to the ip phone

    I'm really grateful if someone can help me with this problem

    Hi Ruchiran,

    To cover the base, ensure that VLAN 2 is added to the database VLAN on the 3750. Simple by using the command "show vlan id 2", if it is not found, you must first create the VLAN 2 on the 3750.

    Second, if you connect the same IP phone directly to the 3750 on an access port, vlan 2 unidentified, is the phone receives IP address as you hope?

    Then, on the trunk of 3750 connection to the SX200. Building the trunk when using a command like "switchport trunk allowed vlan remove 1-4094," then build the trunk more precisely with the VLAN ' trunk switchport allowed vlan add 2 "who will score 2 VLAN port." "

    On the SG200 switch, must be defined the trunk and VLAN Tag 2 on the port to connect to 3750 then the connection to the phone port should be 2 VLANS not identified as access port.

  • Voice VLAN with SRW224G4P

    Hi all

    I tried to config a vlan voice in this switches for the last 3 hours and for me it's impossible... I know how to do it in a switch IOS but with this switches is a nightmare...

    I have this topology

    PC - telephone to IP - SW1 SRW224G4P - SWCORE SRW2024 - router 2921 CME

    I have this config in my router,

    interface GigabitEthernet0/0

    no ip address

    automatic duplex

    automatic speed

    !

    interface GigabitEthernet0/0.1

    LAN description

    encapsulation dot1Q 1 native

    IP 192.168.5.95 255.255.255.0

    IP virtual-reassembly in

    !

    interface GigabitEthernet0/0.100

    Description VLAN VoIP

    encapsulation dot1Q 100

    IP 192.168.251.1 255.255.255.0

    IP virtual-reassembly in

    !

    SW1 created the VLAN 100 and activated as VLAN VOIP

    The first 3 octes for the mac on my phone is inserted into the Table YES telephony

    Belonging to a VLAN automatic voice is enabled in the port where the phone is attached.

    The port connected to the SWCORE has the vlan configured as labeled 100.

    SWCORE has created the VLAN 100 and activated as VLAN VOIP

    The port connected to SW1 has the vlan configured as labeled 100.

    The port connected to the router CME has the vlan configured as labeled 100.

    If I have another config port in SWCORE with 100 VLAN Tag I can ping from FMC to this host.

    Could be the problem, an error of spread vlan?

    Could someone help me? I'm desperate...

    Thank you in advance.

    Hi David,

    Thank you for the purchase of the switch.

    . Like what, even riding a bike, the switch is actually very easy to set up, if you practice on it...

    You mentioned that you use the 'phone YES picture' I assume you have a SF300 - 24 p or p/n command SRW224G4P-K9-NA.  Please be specific with the models of switches you use.

    Using the old SRW series or refreshed in the kernel SRWxxx-K9 (300 series) switch?

    First of all, make sure that you are using version 1.1.0.73 of the switch firmware. This change now or check that 1.1.0.73 is the active image on the switch.

    The switch has two areas to store the firmware images.  It stores the new firmware in the area of the image unused.  The administration for the firmware update Guide and select new firmware for the next reboot.

    CDP is enabled on the switch when using the new software, did not exist with older firmware, where my insistence to upgrade the firmware.

    ( Personally I would prefer that you have a role of catalyst for switching to your CME ISRG2 application, for purposes of support tech.) But this is the land of freedom..)

    I found the following when I added my SG300 - 28 p to a conscious UC500 of VLAN.

    The UC500 was vlan100 of advertising as a vlan voice, configured by Cisco Configuration Assistant, you could try CCP on your ISR.

    I got an IP phone that is plugged into the port of switch in the G7 and uplink to my UC500 via the Gig27 port.

    What follows in blue is a screenshot of my 300 series switch CLI interface.

    You will notice that the switch already filled both VLAN and port information, the only command that I added was "don't activate any complexity of passwords" and some usernames, including free from the screenshot below.

    the configured basically switch itself.

    -See the establishment of the system-

    Description of the system: 28 ports Gigabit PoE managed switch

    System of the time (days, hours: min: sec): 00, 00:12:04

    Contact system:

    Name of the system: switch4cf17c

    System location:

    System MAC Address: d0:d0:fd:4 c: f1:7 c

    System object ID: 1.3.6.1.4.1.9.6.1.83.28.2

    Fans Status: OK

    -See the version-

    SW version 1.1.0.73 (date, June 19, 2011 time 18:10:49)

    Start the version 1.0.0.4 (April 8, 2010 time 16:37:57)

    HW version V01

    Location of activity IP gateway Type.

    ----------------------- ----------------------- --------

    192.168.10.1 active dhcp

    IP address I / F Type of status

    ------------------- --------- ----------- -----------

    192.168.10.17/24 vlan 1 DHCP valid

    -show ipv6 interface-

    IPv6 is disabled on all interfaces

    -show running-config-

    interface gigabitethernet7

    Storm-control broadcast level 10

    output

    interface gigabitethernet7

    Storm-control include multicast

    output

    interface gi27

    point to point spanning tree-type of link

    output

    database of VLAN

    VLAN 100

    output

    Add a voice vlan Yes-table 0001e3 Siemens_AG_phone___

    Add a voice vlan Yes-table 00036 b Cisco_phone___

    Add a voice vlan Yes-table 00096e Avaya___

    Add a voice vlan Yes-table 000fe2 H3C_Aolynk___

    Add a voice vlan Yes-table 0060 b 9 Philips_and_NEC_AG_phone

    Add a voice vlan Yes-table 00d01e Pingtel_phone___

    VLAN voice Yes-table add Polycom/Veritel_phone___ 00e075

    Add a voice vlan Yes-table 00e0bb 3Com_phone___

    hostname switch4cf17c

    No complexity of passwords allow

    No server snmp Server

    interface gigabitethernet7

    macro description ip_phone_desktop

    output

    interface gigabitethernet27

    description of the macro "pass | valeur_log | switch ".

    output

    interface gigabitethernet7

    ! next order is internal.

    macro auto smartport dynamic_type ip_phone_desktop

    switchport trunk allowed vlan add 100

    output

    interface gigabitethernet27

    ! next order is internal.

    switch dynamic_type macro auto smartport

    switchport trunk allowed vlan add 100

    output

    switch4cf17c #sh cdp nei

    Ability code: R - router, T - bridge Trans, B - road Source bridge

    S switch, H - host, I - IGMP, r - Repeater, P - VoIP phone

    M - managed remote-device, C - CAST phone Port,

    W - two port MAC relay

    Device ID Local time from Port platform capacity ID Adv

    The interface direct worm.

    ----------------- ----------- ---- ------- ---------- ------------ -----------

    SEP503De50F133A gi7 2 158 H P CISCO IP eth0

    Phone

    SPA525G2

    68bdab0fdcfd gi27 2 169 S I Cisco SG gi9

    300 10 P

    (PID:SRW2008P - K9) - VOD

    switch4cf17c #sh vlan

    VLAN name Ports type permission

    ---- ----------------- --------------------------- ------------ -------------

    1 1 article gi1-28, required to Po1 - 8 by default

    100 100 gi7, required permanent gi27

    Automatically numbers which ports need to be listed in VLAN 100.

    I did not switch it was connected to VLAN100. I don't have add vlan100 to the database for VLAN.

    Get the ISR router to announce VLAN100 as a vlan voice.

    Best regards, Dave

  • SG300 voice vlan problem with UC520

    Salvation of the Forumers

    My problem statement:

    -Secretary referred to topology.png, this is how my network like structure look

    -the IP phone after startup can not connect, so it cannot download the XML of UC520 configuration file. problem switching suspects.

    -my configuration illustrated in topology.png and my config show vlan as the voice setting.png voice vlan

    -My requirement is switch SG300 unique switchport to carry data VLANs and vlan voice.

    -What is the mode of connection for voice siwth VLAN an IP phone + data must be set up? is it switchport voice vlan vvid switchport voice vlan dot1p, switchport voice vlan unidentified or vlan switchport voice no further action over requirement?

    Thank you

    Noel

    Christmas morning,

    Sorry for the late reply, things have been very hectic in here lately

    1. Why use trunk? the UC520 don't have voice vlan (vlan 20)

    Do you mean that data THAT VLAN is handled by another device? Again I would like to leave as a trunk in order to manage the CPU through the data VLAN. (Except for security or other reasons you would choose differently of course)

    2. the UC520 got CUE (voicemail), how should I design the uplink service for the main switch module?

    Nothing in particular needs to be done for this, CUE is processed and routed inside the UC520, the vlan (default ID = 90) CUE is used if you have another LANDMARK in the network

    1. I guess I did: swithcport the tag vlan vlan unlabelled 20, 10. is it ok for this setting?

    If the Vlan on the switch and the UC520 voice has been defined as VLAN 20 (default value = VLAN 100) it's perfect. Check if the CPU and the switch, the voice VLAN ID is set to 20.

    1 so if I have just the phone to vlan 20 (vlan voice), create the policy of network LLDP?

    If you are ready to configure the VLANS manually on the phone, you don't need politics LLDP, thats right.

    Politics LLDP is used to having phones automatically choose the VLAN you set, so you do not need to set it manually.

    I hope that answers your questions?

    Best regards

    Nico glacier

    Senior Network Engineer - CCNA

  • Dynamic assignment of ACS 5.2 and IP?

    Hi Netpros,

    I just find that version 5.2 of ACS does not justify a dynamic IP using IP pool functionality that was available, since I can remember. All the ideas that this device would be added in what's new?...  I'm working on a migration of 4.1 to 5.2. Currenlty ACS 4.1 is also used for the rental of IP addresses dynamically to remote users. I need to confirm if I really need to migrate this function in other ways. Your help would be much appreciated.

    As far as I know, out of new version 5.3 ACS is still several months away, and it is not confirmed if she would have "IP pools" feature, so I would consider using another device to assign IP addresses in your migration.

  • Dynamic assignment of users

    Hello

    I'm trying to assign users within my process and need advice with her dynamic way. The next two steps describe briefly what I'm trying to reach

    1. a user starts the process to copy data in the PDF file and the completion of the task.

    2. based on the information filled by the first user, I need to determine who the user for the next job is going to be and then assign the task to the user accordingly.

    I don't have the option of using several operations task assign and then by setting the logic in the course rating, as there are too many users can be assigned to the second task (there are more than 50 potential users, where the second user should be selected)

    I am fairly new to Livecycle and among the options I've seen so far, here are a few questions that I need help with

    1. the only option within the operation assign tasks that allows you to assign the user dynamically is to use an XPath expression. If I had to use it, should I be integrating the logic within the form itself and then use the XPath expression to search for the user by the dynamic update of the form after the first user completes the task?

    2. is there another approach to achieve this other than having the selection logic of the user defined in the form itself? In my view, incorporating the logic in the form might not be a good idea because this may have implications on performance and also have information in the form user himself doesn't seem right.

    3. is there an operation I could use, which would contain the logic that I need to determine the next user, and then assign the task to the user depending on the result of the operation?

    I hope that someone would have surely run in this situation before so ideas/suggestions will be appreciated.

    Thank you
    Verdier

    "1. the only option within the operation assign tasks that allows you to assign the user dynamically is using an expression XPath."

    Yes

    "If I had to use it, should I be integrating the logic in the form itself and then use the XPath expression to find the user by updating dynamically shape after only the first user finishes the job?"

    I depends. If you can get to this side server, it woulb be better. If you need to make a change to something, you don't want to change the shape.

    "Is there another approach to achieve this other than to have the logic of selection of the user defined in the form itself?"

    I'm not sure where the logic for the next user, but you could make a database or web service gives the word of the process to get the next user instead.

    "I think integrating the logic in the form might not be a good idea because this may have implications on performance and also have information in the form user himself doesn't seem right."

    I agree.

    "Is there an operation I could use, that would contain the logic that I needed to determine the next user and then assign the task to the user depending on the result of the operation?"

    Yet once again, I need a little more information as to where is the (logical) info.

    Jasmine

Maybe you are looking for

  • "' I'm a toolbar with ' writing ', address book, etc.

    When Thunderbird opens, it is in the Inbox, no way to wite meaassges or get address book.

  • Touchpad of my Qosmio X 770 is locked

    My problem is simple, the touchpad of my laptop is locked.If I press the button at the top of the page, or I press FN F9, the touchpad will remain in force, what should I do? Thank you

  • How to activate the S-video port on a satellite M30X 154?

    Hey does anyone know how to activate the S-video port on your laptop by Satellite SM30X-154? If I press the FN + 5 keys the only options I get is LCD and no S-VHS option. My TV is set up for this I have Watch DVD through the cable. When I connect the

  • error code 646 (KB2431831)

    I try to update Microsoft work 9 and continually receive a failure to download the update. Someone answer?

  • Music license

    When you try to download license music guard appearing error "Netscape browser has not installed Microsoft Windows Media plug-ins Services"