VLAN voice ISE with MAB

Similar Questions

• HP Procurve vlan voice with trunks

  Hi all

  I am a trained guy cisco, so I try to transfer my knowledge to the HP Procurve switches but it takes a little help to obtain VLAN etc set up.

  What I have is 4 switches, 3 at the access layer to the and 1 to the base and distribution.

  I want that switches to a trunk of the base and distribution layer 2 interfaces access layer allows to increase the speed of 2 instead of 1 gigabit uplink. Also, I want is that 2 VLANS is set up for separate voice and data. I want that all ports to be able to take in charge a PC or a VOIP phone. I put the phones to automatically tag the tag of vlan for the vlan voice, but I want all traffic to forward the link to resources shared at the base and distribution layer.

  From what I understand, so I need to:

  Configure a network interface on the access and use of basic/distribution layer switches: b1 - b2 trk1 lacp trunk

  Add VLAN for voice and data and assign vlan voice.

  The problem I have is the tag-no identified parameters.

  I tag vlan trk1 voice and set the priority of the qos to 6 and then comes to create the vlan data not marked on trk1?

  the config I've written so far is:

  b1 - b2 trk1 lacp trunk
  show trunks
  spanning tree
  spanning tree force version rstp operation
  voice VLAN 100 name
  voice
  Tagged trk1
  QoS priority 6
  data name VLAN 200
  not tagged trk1

  is this correct or am I missing something here?

  Thanks in advance!

  Hello:

  You can also copy and paste your message into the HP Business Support Forum - section Procurve switches.

  http://h30499.www3.HP.com/T5/ProCurve-provision-based/BD-p/switching-e-series-Forum

• VLAN voice N3048P and DHCP issues

  Hello

  I just received several switches for our N3048P and 2 x 4048 access layer - WE for our base layer. Are the N3048P VLT'd between two of 4048. There are 4 x N3048P of one on the other. The 4048 possess all gateways via VRRP.

  I have 802. 1 x works with my Windows client test, and I can get the phone (Cisco 7941) to acquire a DHCP address if I put it on a port "switchport mode access. However, if I change the port to a general port with vlan enabled voice and 802. 1 x, the phone does not have a DHCP address, but the PC attached to the phone Gets a DHCP address in the VLAN correct.

  I see CDP and LLDP messages exchanged via Wireshark, and it seems that the phone and the switch are to exchange the VLAN voice correctly.

  My question is, why the phone can't one address DHCP?

  Here's the relevant config of switch below. I know that some of the config can be duplicated for troubleshooting steps:

  VLAN 75
  the name 'Test '.
  output
  VLAN 76
  name "Test_Phones".
  output

  IP helper-address 1.1.1.3 dhcp
  IP helper-address 1.1.1.4 dhcp

  interface vlan 75
  IP 172.16.75.4 255.255.255.0
  IP helper 1.1.1.3
  IP helper 1.1.1.4
  output
  interface vlan 76
  IP 172.16.76.4 255.255.255.0
  IP helper 1.1.1.3
  IP helper 1.1.1.4

  AAA authentication local connection to "defaultList".
  radius of start-stop AAA accounting dot1x default
  control-dot1x system-auth
  radius AAA dot1x default authentication service
  AAA authorization network default RADIUS

  VLAN, VoIP

  source-ip 172.16.75.4 RADIUS server
  Server RADIUS 'key' key
  RADIUS-server host 1.1.1.1 auth
  primary
  name "rad1.
  use of 802. 1 x
  key 'key '.
  output
  RADIUS-server host 1.1.1.2 auth
  name "rad2.
  use of 802. 1 x
  key 'key '.
  output
  Server RADIUS acct 1.1.1.1 host
  name "rad1.
  output
  host server RADIUS acct 1.1.1.2
  name "rad2.
  output

  Gi2/0/1 interface

  Description '802. 1 x client port.
  spanning tree portfast
  spanning tree guard root
  switchport mode general
  switchport general allowed vlan add 75-76 the tag
  dot1x re-authentication
  dot1x quiet-period 5
  dot1x tx-period 5
  dot1x comments - vlan 20
  dot1x Informati-vlan 20
  LLDP transmit tlv ESCR-sys sys - cap
  LLDP transmit-mgmt
  notification of LLDP
  LLDP-med confignotification
  VLAN voice 76
  disable voice vlan auth
  output

  Thanks for any input you may have. I would like to know if there is any other information, I can provide.

  -Jason

  That ends up being the correct port configuration:

  Gi2/0/1 interface

  Description '802. 1 x client port.

  spanning tree portfast

  switchport mode general

  switchport General pvid 75

  VLAN allowed switchport General add 75

  switchport general allowed vlan add 76 tag

  dot1x port-control on mac

  dot1x re-authentication

  dot1x quiet-period 5

  dot1x timeout supp-timeout 15

  dot1x tx-period 5

  dot1x comments-vlan-deadline 15

  dot1x comments - vlan 20

  dot1x Informati-vlan 20

  VLAN voice 76

  disable voice vlan auth

  The most important line here is «the dot1x port-control on mac» I got 'auto control by port dot1x' configured, but it does not work as expected. In addition, defining the comments-vlan-period and supp-timeout were necessary. If the port was shot, the switch would not necessarily reauth port.

• Get some VLAN voice to work on 5548P

  Hello

  I was wondering if there is a way to accomplish the following. I want the passage to the tag the traffic on its own based on the YES Table and pass it up to the Sonicwall (DHCP server/router) without going through the phone itself do the marking. Is this possible? Currently, the installation so I put manually the VLAN ID on the phone itself, but these phones can work anywhere there is a sense of internet connection if I manually add the tag VLAN, the phone will not work outside of the corporate network.

  Thank you

  If your phone supports LLDP-MED, you can install the switch with a VLAN voice. This wiki covers the implementation of the VLAN voice.

  http://en.community.Dell.com/TechCenter/networking/w/wiki/configuring-Dell-PowerConnect-55xx-series-switch-voice-VLAN.aspx

  Do not have to configure phones that you configure LLDP-MED. The VLAN ID information are passed with LLDP-MED configured on the VoIP phone using the LLDP-MED mechanism. By this method, the voice from the VoIP phone data are tagged with the VLAN ID exchanged and the usual traffic would go to the PVID.

  Here is the link to the user guide. LLDP-MED configuration begins at page 540.

  FTP://FTP.Dell.com/ Manuals /Cccomplis /powerconnect-5524_User%27s%20Guide_en-us.pdf

  Once the phone is in the voice VLAN it can still receive an IP address by the DHCP server using the DHCP relay. The switch acts as a DHCP relay agent that listens for DHCP messages,

  and passes between DHCP servers and clients, residing in IP or VLAN different subnets.

  Relay DHCP and espionage begins on page 563 of the user guide.

  I hope this helps.

• Subject of the vlan voice SRW224G4P

  Hello

  I have configured the SRW as vlan, use vlan for voice 212, 348 for data and communicate with cisco IP Phone.

  database of VLAN
  VLAN, 210-216 345-348
  output
  ID of the vlan voice 212

  !

  !
  interface fastethernet1
  activate the storm control
  Storm-control broadcast level 10
  Storm-control include multicast
  maximum port security by 10 points
  port security mode max-addresses
  port security throw trap 60
  spanning tree portfast
  switchport trunk allowed vlan add 212
  switchport trunk vlan native 348
  macro description ip_phone_desktop
  ! next order is internal.
  macro auto smartport dynamic_type ip_phone_desktop
  !

  but when I show vlan voice,.

  It shows:

  =====================================

  1ASW01 #show voice vlan
  Manage the VLAN voice State is automatically triggered
  Operational status of VoIP VLAN is enabled in auto
  Best Local Voice VLAN ID is 212
  Best Local VPT is 5 (default)
  Best Local DSCP is (by default) 46
  Concerted VLAN voice is received from the 34:62:88:73:05:c9 switch
  Concerted VLAN voice priority is 0 (static source active)
  Concerted Voice VLAN ID is 216
  Agreed VPT is 5
  Agreed DSCP is 46
  Voice VLAN agreed last change is 3 May 13 05:06:31

  =====================================

  I don't know why the vlan 216 became the vlan voice?

  I tried changed the build-in macro settings,

  auto macro of the built-in parameters ip_phone $native_vlan 348
  auto macro of the built-in parameters ip_phone_desktop $native_vlan 348

  but the system could not change the value of $voice_vlan.

  How to fix?

  Hi Skywings,

  So I think the above output is after the change, right? If this is true, it seems that something was wrong during the configuration process. Process of VLAN automatic voice has two main phases where one is related to communication between the switches and other Cisco infrastructure devices and synchronization of voice VLAN ID. The second phase is related to the identification of the end device as phone. What I see in your case that the first phase has failed somehow the voice VLAN ID is different from locally configured. Can you share with me your race and also start-up config more CDP neighbors? You can use private message.

  Kind regards

  Aleksandra

• Configure the VLAN voice and data in CISCO SF 300 8 P

  I have a couple of Cisco SF 300 8 P and P 24 switches. I have voice and data VLANS configured as:

  Data VLAN: default 145.17.59.0/24

  Voice VLANS: VLAN 20 172.22.20.0/24

  I have different DHCP servers regarding the data VLAN, we have a physical server that is configured for 145.17.59 * extended IP and Voice VLAN DHCP Server is configured as a router gateway with option 150.

  This configuration works very well with other cisco 2960 switches and 3750 etc. except CISCO SF 300 8 P and 24 p. I tried to set up the voice and data VLAN in these CISCO switches so that phone CISCO (model 6941) should get IP of the VLAN voice and PC should get the IP address of the DHCP server on the data VLAN. I tried several techniques such as LLDP, Port-to-VLAN Config etc.

  Can anyone please guide me / help on this.

  Kind regards
  A K.M.Sayeed

  Hi A.K.M., with Cisco phones you should be able to define simply automatic voice VLAN to be VLAN20.

  ID of the vlan 20 voices

  You must ensure CDP or LLDP is enabled as well. I would check in the web GUI. DHCP for phones can come from a DHCP server on a port access VLAN20 switch, or you can use dhcp for assistance to redirect DHCP server elsewhere.

  If you prefer or you have problems with the CDP or LLDP, you can also program the ports as trunks and add the tag VLAN 20 for them.  In this scenario, you need to ensure inter - vlan routing works and phones that download the file config with corrrect VLAN config.

  These switches do not run ios, so they are similar, but different from the catalyst switches that you mentioned.

  -remember messages useful rate.

• Assignment of the ACS 5.2 VLAN dynamic - problem of vlan voice

  Hello

  When I want to configure the VoIP VLAN through ACS, I go to elements of strategy > permissions and permissions > network profiles and then on the common task page select Voice VLAN > static according to the picture below

  

  Configure then configure the VLAN ID > static > VLAN_number

  But this only allows the VLAN voice and set it to VLAN_number, the VLAN DATABASE will remain unchanged and not configured.

  So my question is, is there a way to configure both the voice (and him) AND the VLAN DATABASE?

  I tried to manually add RADIUS attributes to a second VIRTUAL LAN, but it is not allowed.

  Any idea?

  Kind regards

  Thibault.

  Hi Thibault,

  Why you want to configure the voice and data on the same permission profile?

  If this configuration should be used for an MDA (multi-domain) config on the switch, then take account of the fact that the IP phone and the customer of data must go through separate authentication sessions.

  This being said, you should instead set up two profiles different autz and configure different rules in the authorization policy that apply "voice" for IP phones profile and the profile of 'data' for data clients.

  I hope that answers your question.

  Kind regards

  Federico

  --

  If this answers your question please mark the question as "answered" and write it down, so other users can easily find it.

• ISE with AD integration fails

  Dear,

  I'm trying to join the ISE with our announcement without success, below the error recorded in the ISE:

  Description of error: could not find the domain controller, verify network connectivity

  Support details...

  Name of the error: LW_ERROR_FAILED_FIND_DC

  Error code: 40049

  Detailed log:

  Error description:

  Could not find the domain controller in domain 10.10.10.10: there is no domain in DNS

  Resolution of the error:

  Please make sure that your DNS contains records of field: 10.10.10.10, for more information please see the AD DNS diagnostic tools

  Join the steps:

  13:51:40 to join the field 10.10.10.10 user ise help

  13:51:40 searching for DC area 10.10.10.10

  13:51:40 could not find domain controller in the domain 10.10.10.10: there is no domain in DNS

  Even if we have valid records for both AD and ISE in the DNS, I'm able to resolve the DNS name of our AD when NSlookup to EHT.

  I don't know what the problem is?

  Impatience on your part.

  Kind regards

  Muhannad

  Hello

  First of all, your dns can answer srv request by sending the IP address of the AD? You set the ntp on AD and ISE?

  What ISE version do you use? Do you have applied the latest patches?

  When all of these steps were soon, you took a few traces to the ISE?

  On ISE to check your dns server, you can run the following command:

  Nslookup _ldap._tcp.dc._msdcs. AD. Querytype srv FIELD

  Replace AD. OF your AD real domain name, and then paste your result.

  After obtaining this information, otherwise still works, you must make a few tracks at the ISE. If you do not know how, let me know I'll try to make a screenshot on my lab to give a guideline.

  Thank you

  PS: Please do not forget to rate and score as good response if this solves your problem

• VLAN ID associated with vSwitch

  Hello

  I am trying to run the script to find the Vlan ID associated with the ESXi host so that I do not see individual vswitch, but its giving error. All advice on this will be much appreciated. CSV output. Please find the attached script.

  Exit here

  1. # Example output:
  2. #Device VMHostId: IPSubnet VlanId
  3. #------                 --------                --------                               ------
  4. 10.91.245.128 - 10.91 HostSystem-host-102 #vmnic1...                   2907
  5. 10.91.244.133 - 10.91 HostSystem-host-102 #vmnic1...                   2905
  6. 10.91.243.253 - 10.91 HostSystem-host-102 #vmnic1...                   2903
  7. 10.91.246.11 - 10.91 HostSystem-host-102 #vmnic1...                   2908
  8. 10.91.246.129 - 10.91 HostSystem-host-102 #vmnic1...                    2909

  
  

  Thank you

  vmguy

  [vSphere PowerCLI] C:\Tmp >.\vlan-id.ps1
  Cannot find the [VMware.VimAutomation.Client20.Host.NIC.PhysicalNicImpl] type: make sure that the assembly containing this type is loaded.
  C:\tmp\vlan-ID.ps1:4 tank: 73
  + [VMware.VimAutomation.Client20.Host.NIC.PhysicalNicImpl] < < < <
  + CategoryInfo: InvalidOperation: (VMware.VimAutom... PhysicalNicImpl:String) [], RuntimeException
  + FullyQualifiedErrorId: TypeNotFound

  Try the script need powershell script to gather the host ESX Info Network

• Using Windows Powershell ISE with vSphere PowerCLI

  Hey everybody,

  I'm completely newbieand have just started on the track "managing vSphere with powershell. First problem:

  Is it possible to use Windows Powershell ISE with vSphere cmdlets or can I only use the vSphere PowerCLI?

  I wish I could type my commands directly in the window of the ISE and manage my scripts etc because of this (I find myself n always cut and paste from Notepad when you use the PowerCLI).

  If so, how should I do this?

  I guess its something simple, but when I run the ISE seems not to have registered vSphere cmdlets. I guess I missed something?

  Thank you

  Marc

  In the ISE if you run the following cmdlet, you will get the registered PowerCLI cmdlets:

  Add-PSSnapin "Vmware.VimAutomation.Core".

• ISE with WLC AND switches

  Hello

  We run 3xWLC controller with 800 AP using ISE 1.2 for authentication wireless 802. 1 x. I was looking in the config of the ISE and notice of 400 edge cheating only 2x2960s are configured with 802. 1 x (ISE RADIUS config) and SNMP and only 2 of the port is 2 ap tie with swtich remaining ports.and the 3XWLC in network devices.

  I do not understand how an access point is to do this work (802.1 x) because it is location on different site and people are connecting to various different locations. ISE almost run/do 11 876 profiled ends.

  version 12.2
  !
  boot-start-marker
  boot-end-marker
  !
  enable secret 5 $1$ fokm$ lesIWAaceFFs.SpNdJi7t.
  !
  Test-RADIUS username password 7 07233544471A1C5445415F
  AAA new-model
  Group AAA dot1x default authentication RADIUS
  Group AAA authorization network default RADIUS
  Group AAA authorization auth-proxy default RADIUS
  start-stop radius group AAA accounting dot1x default
  start-stop radius group AAA accounting system by default
  !
  !
  !
  !
  AAA server RADIUS Dynamics-author
  Client 10.178.5.152 server-key 7 151E1F040D392E
  Client 10.178.5.153 server-key 7 060A1B29455D0C
  !
  AAA - the id of the joint session
  switch 1 supply ws-c2960s-48 i/s-l
  cooldown critical authentication 1000
  !
  !
  IP dhcp snooping vlan 29,320,401
  no ip dhcp snooping option information
  IP dhcp snooping
  no ip domain-lookup
  analysis of IP device
  !
  logging of the EMP
  !
  Crypto pki trustpoint TP-self-signed-364377856
  enrollment selfsigned
  name of the object cn = IOS - Self - signed - certificate - 364377856
  revocation checking no
  rsakeypair TP-self-signed-364377856
  !
  !
  TP-self-signed-364377856 crypto pki certificate chain
  certificate self-signed 01
  30820247 308201B 0 A0030201 02020101 300 D 0609 2A 864886 F70D0101 04050030
  2 060355 04031325 494F532D 53656 C 66 2 AND 536967 6E65642D 43657274 30312E30
  69666963 33363433 37373835 36301E17 393330 33303130 30303331 0D 6174652D
  305A170D 2E302C06 1325494F 03550403 32303031 30313030 30303030 5A 303031
  532D 5365 6C662D53 69676E65 642D 4365 72746966 69636174 652 3336 34333737
  06092A 86 4886F70D 01010105 38353630 819F300D 00308189 02818100 0003818D
  B09F8205 9DD44616 858B1F49 A27F94E4 9E9C3504 F56E18EB 6D1A1309 15C20A3D
  31FCE168 5A8C610B 7F77E7FC D9AD3856 E4BABDD1 DFB28F54 6C24229D 97756ED4
  975E2222 939CF878 48D7F894 618279CF 2F9C4AD5 4008AFBB 19733DDB 92BDF73E
  B43E0071 C7DC51C6 B9A43C6A FF035C63 B53E26E2 C0522D40 3F850F0B 734DADED
  02030100 01A 37130 03551 D 13 6F300F06 0101FF04 05300301 01FF301C 0603551D
  11041530 13821150 5F494D2B 545F5374 61636B5F 322D312E 301F0603 551D 2304
  18301680 1456F3D9 23759254 57BA0966 7C6C3A71 FFF07CE0 A2301D06 03551D0E
  04160414 56F3D923 75925457 BA09667C 6C3A71FF F07CE0A2 2A 864886 300 D 0609
  F70D0101 5B1CA52E B38AC231 E45F3AF6 12764661 04050003 81810062 819657B 5
  F08D258E EAA2762F F90FBB7F F6E3AA8C 3EE98DB0 842E82E2 F88E60E0 80C1CF27
  DE9D9AC7 04649AEA 51C49BD7 7BCE9C5A 67093FB5 09495971 926542 4 5A7C7022
  8D9A8C2B 794D99B2 3B92B936 526216E0 79 D 80425 12B 33847 30F9A3F6 9CAC4D3C
  7C96AA15 CC4CC1C0 5FAD3B
  quit smoking
  control-dot1x system-auth
  dot1x critical eapol
  !
  pvst spanning-tree mode
  spanning tree extend id-system
  No vlan spanning tree 294-312,314-319,321-335,337-345,400,480,484-493,499,950
  !
  !
  !
  errdisable recovery cause Uni-directional
  errdisable recovery cause bpduguard
  errdisable recovery cause of security breach
  errdisable recovery cause channel-misconfig (STP)
  errdisable recovery cause pagp-flap
  errdisable recovery cause dtp-flap
  errdisable recovery cause link-flap
  errdisable recovery cause FPS-config-incompatibility
  errdisable recovery cause gbic-invalid
  errdisable recovery cause psecure-violation
  errdisable cause of port-mode-failure recovery
  errdisable recovery cause dhcp-rate-limit
  errdisable recovery cause pppoe-AI-rate-limit
  errdisable recovery cause mac-limit
  errdisable recovery cause vmps
  errdisable recovery cause storm-control
  errdisable recovery cause inline-power
  errdisable recovery cause arp-inspection
  errdisable recovery cause loopback
  errdisable recovery cause small-frame
  errdisable recovery cause psp
  !
  internal allocation policy of VLAN ascendant
  !
  !
  interface GigabitEthernet1/0/10
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard

  interface GigabitEthernet1/0/16
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard
   
  interface GigabitEthernet1/0/24
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard
   
  !
  interface GigabitEthernet1/0/33
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard
   
  interface GigabitEthernet1/0/34
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard
  !
  interface GigabitEthernet1/0/44
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard

  !
  interface GigabitEthernet1/0/46
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard

  interface GigabitEthernet1/0/48
  switchport access vlan 320
  switchport mode access
  IP access-group ACL-LEAVE in
  authentication event fail following action method
  action of death server to authenticate the event permit
  living action of the server reset the authentication event
  multi-domain of host-mode authentication
  open authentication
  authentication order dot1x mab
  authentication priority dot1x mab
  Auto control of the port of authentication
  periodic authentication
  authentication violation replace
  MAB
  dot1x EAP authenticator
  dot1x tx-time 10
  spanning tree portfast
  spanning tree enable bpduguard
  !
  interface GigabitEthernet1/0/49
  Description link GH
  switchport trunk allowed vlan 1,2,320,350,351,401
  switchport mode trunk
  MLS qos trust dscp
  IP dhcp snooping trust
  !

  interface GigabitEthernet1/0/52
  Description link CORE1
  switchport trunk allowed vlan 1,2,29,277,278,314,320,401
  switchport mode trunk
  MLS qos trust dscp
  IP dhcp snooping trust
  !
  !
  interface Vlan320
  IP 10.178.61.5 255.255.255.128
  no ip-cache cef route
  no ip route cache
  !
  default IP gateway - 10.178.61.1
  IP http server
  IP http secure server
  IP http secure-active-session-modules no
  active session modules IP http no
  !
  !
  Access IP extended ACL-AGENT-REDIRECT list
  deny udp any any domain eq bootps
  permit tcp any any eq www
  permit any any eq 443 tcp
  IP extended ACL-ALLOW access list
  allow an ip
  IP access-list extended by DEFAULT ACL
  allow udp any eq bootpc any eq bootps
  allow udp any any eq field
  allow icmp a whole
  allow any host 10.178.5.152 eq 8443 tcp
  permit tcp any host 10.178.5.152 eq 8905
  allow any host 10.178.5.152 eq 8905 udp
  permit tcp any host 10.178.5.152 eq 8906
  allow any host 10.178.5.152 eq 8906 udp
  allow any host 10.178.5.152 eq 8909 tcp
  allow any host 10.178.5.152 eq 8909 udp
  allow any host 10.178.5.153 eq 8443 tcp
  permit tcp any host 10.178.5.153 eq 8905
  allow any host 10.178.5.153 eq 8905 udp
  permit tcp any host 10.178.5.153 eq 8906
  allow any host 10.178.5.153 eq 8906 udp
  allow any host 10.178.5.153 eq 8909 tcp
  allow any host 10.178.5.153 eq 8909 udp
  refuse an entire ip
  Access IP extended ACL-WEBAUTH-REDIRECT list
  deny ip any host 10.178.5.152
  deny ip any host 10.178.5.153
  permit tcp any any eq www
  permit any any eq 443 tcp

  radius of the IP source-interface Vlan320
  exploitation forest esm config
  logging trap alerts
  logging Source ip id
  connection interface-source Vlan320
  record 192.168.6.31
  host 10.178.5.150 record transport udp port 20514
  host 10.178.5.151 record transport udp port 20514
  access-list 10 permit 10.178.5.117
  access-list 10 permit 10.178.61.100
  Server SNMP engineID local 800000090300000A8AF5F181
  SNMP - server RO W143L355 community
  w143l355 RW SNMP-server community
  SNMP-Server RO community lthpublic
  SNMP-Server RO community lthise
  Server SNMP trap-source Vlan320
  Server SNMP informed source-interface Vlan320
  Server enable SNMP traps snmp authentication linkdown, linkup cold start
  SNMP-Server enable traps cluster
  config SNMP-server enable traps
  entity of traps activate SNMP Server
  Server enable SNMP traps ipsla
  Server enable SNMP traps syslog
  Server enable SNMP traps vtp
  SNMP Server enable traps mac-notification change move threshold
  Server SNMP enable traps belonging to a vlan
  SNMP-server host 10.178.5.152 version 2 c lthise mac-notification
  SNMP-server host 10.178.5.153 version 2 c lthise mac-notification
  !
  RADIUS attribute 6 sur-pour-login-auth server
  Server RADIUS attribute 8 include-in-access-req
  RADIUS attribute 25-application access server include
  dead-criteria 5 tent 3 times RADIUS server
  test the server RADIUS host 10.178.5.152 auth-port 1812 acct-port 1813 username test-RADIUS 7 key 03084F030F1C24
  test the server RADIUS host 10.178.5.153 auth-port 1812 acct-port 1813 username test-RADIUS 7 key 141B060305172F
  RADIUS vsa server send accounting
  RADIUS vsa server send authentication

  any help would be really appreciated.

  I'm not sure that completely understand the question; But if LSE is only political wireless, then none of the wired switches need any configuration of ISE.

  Access points tunnel all wireless traffic to the WLC on CAPWAP (unless you use FlexConnect). This is the configuration 802. 1 x on the WLC that implements policies defined in ISE.

  Switches wired never need to act as an access network (n) device and so do not need to be defined in ISE unless or until you want to apply policies of ISE for wired devices...

• Can I use a digital voice recorder with windows speech recognition

  I want to use a digital voice recorder to transcribe in Windows Vista or windows 7 speech recognition. So far, I only got responses like 'Use Dragon'. I don't want to use Dragon! I want to use my trained and perfectly good windows Vista or Windows 7 built into the software. Please, anyone, just a direct response. I will buy from any digital voice recorder can transcribe Windows.  I am well aware that I can use dragon so please don't keep advise me. I travel a lot and do not always have access to a pc equipped with dragon or tablets. But I still have windows vista or windows 7 built in. Would be very happy a good answer (and any settings if necessary >) thanks guys.

  Hello

  I suggest you check with the Windows Compatibility Center, to check what digital voice recorder is compatible with Windows 7 and Windows Vista, since the following links and you can use these digital voice recorders.

  http://www.Microsoft.com/Windows/compatibility/Windows-7/en-us/search.aspx?l=en-us&s=digital%20voice%20recorder&type=hardware

  http://www.Microsoft.com/Windows/compatibility/Windows-Vista/search.aspx?type=hardware&s=digital%20voice%20recorder

  Important: Using third-party software, including hardware drivers can cause serious problems that may prevent your computer from starting properly. Microsoft cannot guarantee that problems resulting from the use of third-party software can be solved. Software using third party is at your own risk.

• I CAN SEND/RECEIVE A FAX USING MY CANON PRINTER/FAX/COPIER USB AND MY MODEM INTERNAL VOICE/FAX WITH MY VERIZON USB MODEM FROM THE INTERNET?

  I AM RUNNING VISTA HOME PREM MY DEVICE MANAGER INDICATES THAT I HAVE AN INTERNAL FAX/VOICE MODEM. I'M SO CONFUSED.

  Original title: I DO NOT HAVE A POSER LINE, I CAN SEND and RECEIVE a FAX by USING MY USB CANON PRINTER/FAX/COPIER AND MY INTERNAL VOICE/FAX MODEM WITH MY VERIZON USB MODEM ACCESS to the INTERNET?

  The game, July 1, 2010 21:03:19 + 0000, CAPTBARRY wrote:

  I AM RUNNING VISTA HOME PREM MY DEVICE MANAGER INDICATES THAT I HAVE AN INTERNAL FAX/VOICE MODEM. I'M SO CONFUSED.

  Ouch! Please do not yell at us. We can hear you if you type normally,
  in different cases.

  You have an internal fax/voice modem, but if it is not connected to
  a land line, cannot you send/receive faxes like this.

  Your only choice is to not make use of your machine gun, but to use a web site
  service to send faxes for you.

  Ken Blake

• Anyone used handfree Bluetooth (voice) composition with 2.2?

  2.2 a numbering voice bluetooth?

  I had the opportunity to check it out yet and I was wondering if I will be able to deal with my T505 havn't.

  I used it with my H17txt motorcycle.  Works very well.

• VLAN voice and data on a single port

  Hello

  I have some 5548 P Dell switches, but I just Cisco environment.

  I find a lot of information on this but most of it relevant to the VLAN marked and unmarked on a port in general. Some articles suggest to put the port in trunk mode...

  anyway (without taking into account the QoS) how you would accomplish this example Cisco on a Dell switch:

  Switch (config) #interface g0/1

  Switch(Config-if) #switchport mode access

  Switch(Config-if) #Switchport access vlan 50

  Switch(Config-if) #voice switchport vlan 10

  Thank you!

  For general mode, commands would be present as follows.

  Console (config) # interface gigabitethernet 0/1/1

  Console # switchport mode general

  Console # switchport general allowed vlan remove 10

  Console # switchport General allowed vlan add 2,3,4,50 tag

  Activate console # vlan VoIP

  Trunk mode:

  Console (config) # interface gigabitethernet 0/1/1

  Console # switchport mode Trunk

  Console # switchport Trunk allowed to remove vlan 10

  Console # switchport Trunk allowed vlan add 2,3,4,50

  Activate console # vlan VoIP