802.1x, voice vlan and IP phone

[k.lapczuk]

Hi, I reviewed many posts here, and I still need the clarification how 802.1x on the switch works with non-Cisco IP phone (not supporting CDP) and PC connected to the PC port. If I configure 802.1x on a switch port, along with access and voice vlan, next I configure the static voice vlan on the non-Cisco phone, will it be possible to authenticate the user on the PC and bypass authentication for IP phone? Is CDP required in such scenario - (non-Cisco IP phone doesn't support it)?

Regards,

Krzysztof

[jafrazie]

You need CDP for touchless interop. CDP can of course be spoofed though, so proceed with caustion anyway.

You need multi-domain authentication to appropriately deal with non-Cisco phones and port-based access-control. See here to get started:

<http://www.cisco.com/en/US/products/ps7077/products_configuration_guide_chapter09186a008077a284.html#wp1231964>

Hope this helps,