Wired

 View Only
last person joined: 5 days ago 

Back to discussions
Expand all | Collapse all

Cisco ISE, 2540's and IP Phones

This thread has been viewed 8 times

  • 1.  Cisco ISE, 2540's and IP Phones

    Posted Apr 27, 2022 02:51 PM
    Hi,

    Deploying Cisco ISE for 802.1x/MAB auth using Aruba 2540's however I'm having issues with legacy ShoreTel IP Phones. I'm not overly familiar with Aruba switches and how they work with the voice vlan but with Cisco kit I would normally based the radius attribute 'cisco-av-pair' with voice domain permissions but I'm not sure how this translates to Aruba land. I can dynamically pass the VLAN using "Tunnel-Private-Group-ID = 1:VoIP" but that would be untagged.

    Any thoughts on this?

    Thanks

    ------------------------------
    Mark George
    ------------------------------


  • 2.  RE: Cisco ISE, 2540's and IP Phones

    EMPLOYEE
    Posted Apr 28, 2022 09:18 AM
    If this is for ArubaOS switches, check this post. And this post with the post by Sietze Reitsma on how to do the same with named VLANs (would be my recommendation over the hex to decimal conversion).

    With AOS-CX switches you would include this in the User Role.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message