Security

Reply
Frequent Contributor I

Wired 802.1X: Aruba 2920, VoIP phone with wired port used

Hello everyone, I am aware of an article with high level overview of the solution, https://community.arubanetworks.com/t5/Security/Wired-802-1x-phone-and-PC/td-p/275692, but was wondering if someone can share some low level information. The way we are trying to set this up is to define all device types as Attributes for every switch in the estate (Network Device->(select a switch)->Attributes-> create entry for a type of device (i.e. Corporate, CCTV, AV...) and assign VLAN ID as a "Value"), an after successful authentication push correct Attribute by Enforcement Policy to the switch. In case of VoIP phones we will have one tagged VLAN (phone), and one untagged (PC). The question is how will our Enforcement Policy combine both attributes, and how is CPPM going to enforce tagged/untagged VLANs config onto switch. Thanks in advance.
Regards,
NesaM --ACMP, ACCP, CWNA--
Frequent Contributor I

Re: Wired 802.1X: Aruba 2920, VoIP phone with wired port used

Hello,

 

I had the same issue a few weeks ago and posted here as well. Take a look at the thread I opened: https://community.arubanetworks.com/t5/Security/802-1x-authentication-in-Aruba-HPE-switches/td-p/376932

 

You can check this as well (there is a wealth of info here): http://wiki.freeradius.org/vendor/HP#RFC-4675-(multiple-tagged/untagged-VLAN)-Assignment

 

Best Regards,

Kevin

Guru Elite

Re: Wired 802.1X: Aruba 2920, VoIP phone with wired port used

Did you look at the ClearPass Solution Guide for Wired Policy Enforcement? That is the topic of this entire doc.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Frequent Contributor I

Re: Wired 802.1X: Aruba 2920, VoIP phone with wired port used

Thanks both, I will go through both Kevin's links and a document Tim has pointed at.
Regards,
NesaM --ACMP, ACCP, CWNA--
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: