3560 switch with 802.1x , voice vlan and a Cisco ATA

Unanswered Question
Dec 3rd, 2007
User Badges:


A Cisco ATA is connected on a port of a 3560 which is configured to belong to

a voice Vlan and also runs 802.1x MAB (mac-auth-bypass).

Is this configuration supported ?


-If the switchport is configured only as a voice vlan port all is ok

-If the switchport is configured only as a 802.1x MAB port all is ok

-When both MAB and voice vlan are configured on the port the ATA does not join the network


Any ideas would be welcome.


Best Regards,Pan

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
tstanik Mon, 12/10/2007 - 13:36
User Badges:
  • Bronze, 100 points or more

You can use the MAB to put the ATA device into the vlan of voice but if voice vlan is also on same port the catalyst will refuse to add the mac address in the voice vlan. This is due to the fact that what ACS return as type is vlan, but what is needed is voice-vlan so that the catalyst would add the mac in the voice vlan. This is not possible as of now.

7pliapis Mon, 12/10/2007 - 13:54
User Badges:

Thank you for your answer.

While investgating the issue I came accross the following url:



Which lists,

"5 Configure the RADIUS server to send a Cisco Attribute-Value (AV) pair attribute to authorize a voice device. Without this, the switch treats the voice device as a data device. Define Cisco Attribute-Value (AV) pair attribute with a value of device-traffic-class=voice and click Submit + Restart".


Will the above do the trick or have I misunderstood the above statement ?

I don't have access to a similar setup to test, thus the question.

Thanks again.

Best Regards,Pan


This Discussion