topic 802.1 x behind ip phone in ExtremeWireless (General)

802.1 x behind ip phone

Kamal_FIKRI — Sat, 19 Mar 2016 01:48:00 GMT

Hello,
I try to configure Extreme switch summit X-440-48 with netlogin and dynamic vlan radius based, all is working fine when i plug a PC directly to the switch, but i need to use IP Phone Snom in the voice vlan without authentication and the PC should be behind the IP Phone, there is a way to bypass authentication for IP Phone based on there OUI and authenticate all PC ? i already did it with 3Com switch.

RE: 802.1 x behind ip phone

BradP — Sat, 19 Mar 2016 02:19:00 GMT

Hi Kamal,

You should be able to create an access control list for the port that looks like this:

entry PhoneVlan {
if {
ethernet-source-address 00:01:02:03:01:01 / ff:ff:ff:00:00:00; } then { add-vlan-id ; } } In the above example, the effective match condition will be "00:01:02:xx:xx:xx". If no mask is supplied, it will be assumed to be ff:ff:ff:ff:ff:ff.

The 'then' statement should include "add-vlan-id" and then the vlan ID that you want to use.

RE: 802.1 x behind ip phone

Kamal_FIKRI — Sat, 19 Mar 2016 04:09:00 GMT

Thank you Brad,
Can we create access control list in CLI mode ? if so, this ACL will work with netlogin in the same port ?
i'll give it a try

RE: 802.1 x behind ip phone

BradP — Sat, 19 Mar 2016 04:13:00 GMT

Hi Kamal,

Yes, to create an access list in CLI mode, enter the command "vi " yes, that policy should work with netlogin on the same port.

RE: 802.1 x behind ip phone

Kamal_FIKRI — Sat, 19 Mar 2016 04:17:00 GMT

good idea, I'll test it by tomorrow, thanks a lot Brad 😄