NAC and IP phone

[alex goshtaei]

Hi All,

I was configuring NAC. I've noticed when I plug IP phone to the switch managed by NAC, IP phone register to the callmanager without to creating filter on NAC. On switch port, voice vlan has been assigned and IP phone has been registered without any problem.

Do I still need to setup filter for IP phones or leave it as is?

why Cisco mentions in documents to create filter for IP phones even though it's registered to Callmanager without filter?

any suggestion would be very appreciated.

Alex

[Faisal Sehbai]

Alex,

Your switch will report any MAC addresses on the port it sees and sends traps to the CAM. When the CAM sees a new trap on the switchport, it will switch it to auth vlan.

You add the filters so the CAM can ignore the MAC addresses of the phones when the switch reports them, otherwise your port will continue to bounce between auth and access vlans.

HTH,

Faisal

[Bryan Wulfric]

Hi Faisal,

Do we need to use certification timer when the user connect to network via back of the IP Phone? In the port profile, do we need to check "Change VLAN according to global device filter list"?

Thanks.