08-14-2015 08:32 AM
I setup wired dot1x with juniper switches for if you pass dot1x then you are an employee vlan and if not clearpass sends a guest vlan back.
I'm not sure though how to get the ip phone to work in this case. When a phone connects to a dot1x configured port with mac auth it just sits there saying failed to get dhcp!! so let's say I allow it to get dhcp, clearpass gets to profile it and then pushes back the voice vlan to the juniper switch, how do I deal with an employee connecting their laptop to the switch port on the back of the IP Phone? would the Juniper switch port force them to do dot1x or what?
any suggestion to point me on the right direction are appreciated.
08-14-2015 08:36 AM
Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP