Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ACS 5.2 Dynamic VLAN assignment - voice vlan issue

Hello,

When I want to configure the Voice VLAN assignment through ACS, I go to Policy Elements> Autorizations and Permissions> Network Profiles then on the common task page select Voice VLAN > Static as per the picture below

untitled.bmp

Then configure configure the VLAN ID > Static > VLAN_number

But this only enables the Voice VLAN and set it to the VLAN_number, the DATA VLAN will remain unchanged and not configured.

So my question is, is there a way to configure both the voice (and enable it) AND the DATA VLAN?

i tried to manually add RADIUS attributes for a second VLAN but it is not allowed.

Any idea?

Regards,

Thibault.

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ACS 5.2 Dynamic VLAN assignment - voice vlan issue

Hi Thibault,

Why would you like to configure both data and voice on the same authorization profile?

If this config is to be used for a MDA (Multi-domain) config on the switch, then take into account that the IP phone and the data client will have to go through separate authentication sessions.

Given this, you should rather configure two different autz profiles and configure different rules in the authorization policy that apply the "voice" profile to the IP phones and the "data" profile to the data clients.

I hope this answers your question.

Regards,

Federico

--

If this answers your question please mark the question as "answered" and rate it, so other users can easily find it.

3 REPLIES
Cisco Employee

Re: ACS 5.2 Dynamic VLAN assignment - voice vlan issue

Hi Thibault,

Why would you like to configure both data and voice on the same authorization profile?

If this config is to be used for a MDA (Multi-domain) config on the switch, then take into account that the IP phone and the data client will have to go through separate authentication sessions.

Given this, you should rather configure two different autz profiles and configure different rules in the authorization policy that apply the "voice" profile to the IP phones and the "data" profile to the data clients.

I hope this answers your question.

Regards,

Federico

--

If this answers your question please mark the question as "answered" and rate it, so other users can easily find it.

New Member

Re: ACS 5.2 Dynamic VLAN assignment - voice vlan issue

Hello Frederico,

Actually your right, it's not a config issue, it's an approach issue.

Thanks a lot for your answer.

Regards,

Thibault.

New Member

Hello, how can i configure my

Hello,

 

how can i configure my authorization profile to get one tagged vlan and on untagged vlan when i connect my ip-phone ?

 

i want to connect an pc directly to the phone ? so i need one tagged port for voice and one untagged vlan for data.

 

is this possible ?

 

thanks

 

regards

 

 

1700
Views
0
Helpful
3
Replies
CreatePlease login to create content