Dell POWERCONNECT 6200 SERIES Configuration Manual

Also see for POWERCONNECT 6200 SERIES: Getting started guide Getting started guide

Contents

Switching Configuration 39Example #2: Configuring Voice VLAN on an Unauthenticated PortIn some networks, multiple devices (for example, a PC, Printer, and phone) are connected to a single porton the switch. The PCs and printers are authenticated by 802.1X, but the phone might not support802.1X authentication. The PowerConnect 6200 Series switches can allow unauthenticated traffic on theVoice VLAN for the phones that do not support authentication while requiring all other devices on theport to authenticate individually.The phones that do not support 802.1X authentication are automatically directed to the Voice VLANwithout manual configuration. The phones will obtain this information using one of the followingmethods:• LLDP-MED• CDP• DHCPIn this example, interface 1/g10 is set to an 802.1Q VLAN. The port must be in general mode in order toenable MAC-based 802.1X authentication. Then, port 1/g10 is configured with MAC-based portauthentication to allow authentication for multiple hosts on the same port (see "Example #2: MAC-Based Authentication Mode" on page 108 for more information). Next, Voice VLAN is enabled on theport with the Voice VLAN ID set to 25. Finally, Voice VLAN authentication is disabled on port 1/g10because the phone connected to that port does not support 802.1X authentication. All other devices arerequired to use 802.1X authentication for network access.Support for unauthenticated Voice VLANs is available in release 2.1 and later versions.console#configureconsole(config)#interface ethernet 1/g10console(config-if-1/g10)#switchport mode generalconsole(config-if-1/g10)#dot1x port-control mac-basedconsole(config-if-1/g10)#voice vlan 25console(config-if-1/g10)#voice vlan auth disableconsole(config-if-1/g10)#console#show voice vlan interface 1/g10Interface...................................... 1/g10Voice VLAN Interface Mode...................... EnabledVoice VLAN ID.................................. 25Voice VLAN COS Override........................ FalseVoice VLAN Port Status......................... DisabledVoice VLAN Authentication...................... Disabled