Hi joseph,
i went through this document and it's working fine in this scenario. but i would like to achieve samething without configuing "switchport voice vlan xx" in switch side. since we have so many voice vlans and 400+ switches. it would be difficult for us to identify each port and configure the voice vlan in all switches.
at the end my switch interface configuration will be like below
interface GigabitEthernet1/0/1
switchport access vlan yy("default vlan")
switchport mode access
##switchport voice vlan xx## i removed this from switch and trying to push through clearpass.
authentication host-mode multi-domain
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
dot1x pae authenticator
dot1x timeout server-timeout 30
dot1x timeout tx-period 10
dot1x max-req 3
dot1x max-reauth-req 3
spanning-tree portfast
Am trying to use below attributes in enforcement profile but no luck.
cisco-avpair="device-traffic-class=voice",Tunnel-Type=1:VLAN,Tunnel-Medium-Type=1:IEEE_802,Tunnel-Private-Group-ID=1:VOICE-LAN