Configuring Switch for CCA is behind non-Cisco phone, NAC OOB VGW Deployment
Hi,
I need to configure the edge switch port to keep serving non-Cisco IP phone on deploying NAC as OOB VGW.
I appreciate your advise, but make sure 802.1x solution as the last option.
Thanks
Mike
Hi,
Please look at the config guide:
http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cam/m_oob.html.
HTH,
Tiago
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.
Similar Messages
-
Catalyst Express 500 802.1q with non-Cisco Phones
This weekend we spent hours trying to get 802.1q tagging to work on a VLAN with ShoreTel phones. The user interface on this switch seems to only allow "Cisco-Voice" VLAN, without any specifics. This didn't work. The specs on this switch say that the .1q is supported, but we couldn't figure it out. The more expensive switches were easier to configure for Voip QoS.
Can anyone advise me on the tricks to getting this to work with the lower end Catalyst Express 500? Or does this switch only support 802.1q with Cisco phones?Cisco IP Phone uses CDP to let the ip phone know what vlan it's suppose to be (via voice-vlan). shore tel would definitely not use CDP since CDP is cisco proprietory, so it's voice vlan must be defined on it, I rememer Avaya being the same way. So, having said that, just make sure that the Shore tel Ip phone are in the right vlan. what does not work anyway? shore Tel IP Phone will not come up? Will not get it's configuration from it's software PBX? Use the smartport configuration on CE500.
Please rate all posts. -
How can I copy mp3 files from my Itunes library to an SD card for use in a non-apple phone?
How can I copy mp3 files from my Itunes library to an SD card for use in a non-apple phone? I can physically copy the tunes as mp3's but the phone does not seem to be able to play all of them. Do I need to copy an entire album or can I just pick & choose individual songs? The phone is question is an LG running who knows what for an operating system.
AAC is Advanced Audio Coding. Basically it's a format that sounds better than MP3 but doesn't take up as much space as a lossless format (like you'd have on a CD). More than likely you've had that encoding turned on when you ripped your music into itunes (it's the default encoder). Therefore your LG phone won't play them.
You need to turn off the AAC format by going to the iTunes menu, Preferences, General (at the top), then clicking the "Import Preferences" button. Change the AAC Encoder to MP3 Encoder. After that you'll have to make MP3 copies of your songs by right clicking them and selecting "Create MP3 Version." You'll get a copy of the song that should transfer to your SD card and have MP3 encoding. Hopefully your phone will play that. -
Yeah bascially all in the title but I need to remove my number from imessage but I can not do that from the phone because it won't turn on..extremely frustrating please help
Contact Apple Support to deactivate iMessage: https://www.apple.com/support/appleid/contact/
-
Interconnecting cisco switches with non-cisco switches
I need help concerning interconnecting two Cisco switches (3550s) using a non-Cisco switch or hub on the LAN. I have noticed that the two Cisco switches connected using a non-Cisco switch are able to communicate well, however a PC connected to the non-Cisco switch/hub can not ping any device on the LAN. The non-Cisco device is a working one. When the two Cisco switches are connected using a Cisco switch, PCs connected to the interconnecting switch are able to ping. Whats the explanation? Please help.
Building configuration...
Current configuration : 3342 bytes
! No configuration change since last restart
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
clock timezone GMT -2
ip subnet-zero
ip rcmd rcp-enable
ip rcmd remote-username cwuser
spanning-tree mode pvst
spanning-tree extend system-id
interface FastEthernet0/1
switchport mode dynamic desirable
interface FastEthernet0/2
switchport mode dynamic desirable
interface FastEthernet0/3
switchport mode dynamic desirable
interface FastEthernet0/4
switchport mode dynamic desirable
interface FastEthernet0/5
switchport mode dynamic desirable
interface FastEthernet0/6
switchport mode dynamic desirable
interface FastEthernet0/7
switchport mode dynamic desirable
interface FastEthernet0/8
switchport mode dynamic desirable
interface FastEthernet0/9
switchport mode dynamic desirable
interface FastEthernet0/10
switchport mode dynamic desirable
interface FastEthernet0/11
switchport mode dynamic desirable
interface FastEthernet0/12
switchport mode dynamic desirable
interface FastEthernet0/13
switchport mode dynamic desirable
interface FastEthernet0/14
switchport mode dynamic desirable
interface FastEthernet0/15
switchport mode dynamic desirable
interface FastEthernet0/16
switchport mode dynamic desirable
interface FastEthernet0/17
switchport mode dynamic desirable
interface FastEthernet0/18
switchport mode dynamic desirable
interface FastEthernet0/19
switchport mode dynamic desirable
interface FastEthernet0/20
switchport mode dynamic desirable
interface FastEthernet0/21
switchport mode dynamic desirable
interface FastEthernet0/22
switchport mode dynamic desirable
interface FastEthernet0/23
switchport mode dynamic desirable
interface FastEthernet0/24
switchport mode dynamic desirable
interface GigabitEthernet0/1
switchport mode dynamic desirable
interface GigabitEthernet0/2
switchport mode dynamic desirable
interface Vlan1
ip address
ip default-gateway
ip classless
ip http server
snmp-server community
snmp-server community
snmp-server location
snmp-server system-shutdown
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps flash insertion removal
snmp-server enable traps bridge
snmp-server enable traps stpx
snmp-server enable traps rtr
snmp-server enable traps port-security
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps MAC-Notification
snmp-server enable traps hsrp
snmp-server enable traps cluster
snmp-server enable traps copy-config
snmp-server enable traps syslog
snmp-server enable traps vlan-membership
line con 0
line vty 0 4
login
line vty 5 15
login
ntp clock-period 17180064
end -
Inline Posture deployment for non Cisco Wireless Controler
Hi all of you
I have to deploy an Inline Posture to manage non Cisco Wireless Controler ( ZoneDirecteur 1000 Ruckus), It seem easy but I don't know from where to start. All documentation I rode it's about Inline Posture for VPN. I want just to use this Inline Posture to manage Wireless user through ZoneDirector wirelss controler. Thank you.
Regards
KouassiSo what is the solution for this scenario?
remote site has non-cisco autonomous wireless AP. NAC is centralized. I can not use OOB since there is no support for non-cisco AP in OOB mode. As a result I use InBand mode. This means that local wireless trffic in remote site must travel to central site, go through NAC Server and go back to remote site. Is this correct? -
FlexConnect Central Switching for GuestWLAN
Hi All,
I plan on setting up a new WLAN network.
5 office locations, a single WLC in the primary DC at the moment. Each 5 office location is routed over a L3 link
If I have a guest WLAN (vlan 30) that it available at each site and want to centrally switch it, do I set the WLC DHCP server on the WLC 'vlan30 interface' to that of the 'management' interface if I have the DHCP setup locally on the WLC? I assume because this guest network is centrally switched, the actual assigned IP of the guest network does not matter if it not in the same supernet of the remote site?
For regular business WLANs (data/voice) that are set for local switching, is there any DHCP settings that need to be setup on the WLC, or does the client automatically get a IP based on the local subnet (using the ip-helper on that L3 interface?) assuming the AP is setup as trunk at the remote (with native vlan set as management vlan).do I set the WLC DHCP server on the WLC 'vlan30 interface' to that of the 'management' interface if I have the DHCP setup locally on the WLC?
Yes, if you use WLC as your DHCP server for guest users, you have to use WLC management IP as DHCP server address on vlan 30 (assuming it is for guest)
For regular business WLANs (data/voice) that are set for local switching, is there any DHCP settings that need to be setup on the WLC, or does the client automatically get a IP based on the local subnet (using the ip-helper on that L3 interface?) assuming the AP is setup as trunk at the remote (with native vlan set as management vlan).
As long as you do FlexConnect local switching with required vlan mapping in each WLAN, you do not required DHCP server setting on WLC interface where that WLAN assign to. All traffic locally switched & use helper address configured under SVI of that locally switched vlan.
Refer this configuration guide for more details
http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configuration-guide/b_cg80/b_cg80_chapter_010001000.html
HTH
Rasika
**** Pls rate all useful responses **** -
Hi there,
I know that with WLC 5.1 and NAC 4.5 Cisco started to support OOB, NAC implementation. Now here is my question:
A customer has CISCO environment except for the wireless which is another vendor. What are the options to bring wireless traffic into NAC server? Is OOB deployment possible?
Thanks,
rdianatSo what is the solution for this scenario?
remote site has non-cisco autonomous wireless AP. NAC is centralized. I can not use OOB since there is no support for non-cisco AP in OOB mode. As a result I use InBand mode. This means that local wireless trffic in remote site must travel to central site, go through NAC Server and go back to remote site. Is this correct? -
"click to call" posibillity in cisco phones ?
Hello
Is there any way to call numbers on cisco phones directy from clik on website ?
I am looking for sollution like in skype :
https://support.skype.com/en/faq/FA12264/what-is-the-skype-add-on
Users install add on on computer webbrowsers and numbers are automicaly highlited and then user can click this and call
I am looking this for hardware voip phones.
Is this possible on any cisco or non-cisco phones ?
Sorry for my bad englishSkype is working to provide a Click to Call update as close to a Firefox browser update release as possible. The current Skype click to call plugin is compatible with Firefox 26.
Follow the latest Skype Community News
↓ Did my reply answer your question? Accept it as a solution to help others, Thanks. ↓ -
ISE web auth for non-cisco switch(D-link 3528)
Is it possible to use ISE(inline posture node) to redirect the wired users to ISE guest portal ?
And the wired users will get full network access after they pass the web auth.you can use ISE ln-line posture node with 3rd part switches
RADIUS access device must supply the following RADIUS attributes:
Calling-Station-Id (for MAC_ADDRESS)
User-Name
NAS-Port-Type
RADIUS accounting message must have the Framed-IP-Address attribute
VLAN, DACL features can be used but again it depends on switch models let us know specific switch models . Certain advanced use cases, such as those that involve posture assessment, profiling, and web authentication, are not consistently available with non-Cisco devices or may provide limited functionality, -
What's "SAVE" configuration command for Cisco switch/ router?
What's "SAVE" configuration command for Cisco switch / router? I know Switch#copy running-config startup-config works well,
but so long, any other command that easy to remenber?What's "SAVE" configuration command for Cisco switch / router? I know Switch#copy running-config startup-config works well, but so long,
any other command that easy to remenber?
yes, here: Switch#write,and want to know more about the Cisco switch, please visit:http://www.3anetwork.com/cisco-switches-price_c1 -
How should I configure the smartport on a catalyst express 500 switch if I am connecting a non-cisco switch like a small linksys. I dont think I can make the smartport a switch because it tries to trunk?? right??
And if I leave it as a PC it complains abouting having to many devices connected to it.
Would having it configured as something like an access point work??Now, I noticed something very odd, I kept the switch option selected on the port on the ce 500 that the linksys was plugged in to and the devices plugged in downstream behind the linksys all kept the correct VLAN assignment. Phones were in the voice vlan and PC's were in the data vlan. Does not really make sense to me how this is working??
-
Here is a question a customer emailed me today
" so im looking at the Cisco IPT solution and its impressive. after noticing the costing, i see no way of justifying the switching infrastructure. our entire organization is based on dell switching and Cisco routers.
we intend to stay with this as our switches are new has QOS and POE enabled as well as IEE power compliant as i understand and will work with the Cisco Phone models. we can also acheive the same measure of redundancy as proposed in the 3-layer model that Cisco applies. please advise as to if there are any limitations of these switches as i cannot see any at this point in time"
from a pre-sales prospective how do you justify changing to Cisco, and more importantly, from a TECHNICAL prospective do we convince the customer to change or leave?In terms of implementation and operation: if you follow the separate VLANs for voice and data model - which you probably should - you will have to manually set the correct VLAN on every phone in the phone settings. phones use CDP to discover voice VLAN. I've done a deployment with non-Cisco switches such as this, and it definately slows things down. Of course you don't want to hurt any feelings, but... there is a reason Dell was giving away their switches for free a few years back. I like to save money too, but I wouldn't stake my business on running critical infrastructure this level of switch.
-
Does anyone know if a 7960 (SIP) phone can connect to a non-Cisco switch and separate the Voice traffic from the access port traffic?
I tried connecting a 7960 to a baystack 450T, configuring the switchport as a "tagged trunk", and then changing the Admin Vlan ID on the phone to the desired voice vlan. It looks as though the switch wants the access port traffic to be tagged as well.
Any help would be greatly appreciated!
Thanks,
DarinHi !
You need to configure a 802.1q trunk on your non-cisco switch. The 802.1q native vlan should be the one the PC is in. The voice vlan will be tagged.
Configure all parameters (like voice-vlan-id etc) on the phone manually (obviously CDP does not work). I have done it and it works fine (but i never tried on the switch you mentioned).
Inline Power will also not work because the 7960 is not 802.3af compliant (yet).
Mike -
How to set up Qos for Microsoft Lyncs 2013 in cisco Switches and Router
Hi
as i am new to Qos part , please send the complete qos configuration command has to apply in my cisco 2960s switchs as well as 4506 chassis(L3 mode act as my router).
as i know from microsoft, DSCP 46 and 34 should give highest priory
please send the completed configuration for priorities this DSCP
thanks
SujishHi,there,
The rule setting should be same as in Exchange 2010,you can configure it via outlook or OWA if you have full access permission. I also believe it should be something related to Repliation,would you please check the event log to see if the
AD and Exchange replication has completed.
In some cases, replication can take longer depending on how many AD sites and Exchange servers in the environment:
http://support.microsoft.com/kb/148381
http://support.microsoft.com/kb/158989
Hope these useful!
Regards,
Sharon
Sharon Shen
TechNet Community Support
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question.
Maybe you are looking for
-
10g R2 Client Installation Problem on Windows 2003 64 bit itanium
Hi, When I click on the setup.exe, i am getting the following..and not getting setup screen Using paramFile: E:\oracle_client\10g_winIA_client_102010\client\install\oraparam.ini No pre-requisite checks found in oraparam.ini, no system pre-requisite c
-
"Are you sure you want to leave this page?" on saving Publishing Page
Hi all, we're getting some ... interesting ... behavior in IE. Setup: We have a page layout based on some content type. Both contain (besides other fields) a DateTimeField which is shown in edit mode. When a user clicks "Save" after editing the page,
-
Using JPEG's - see them in timeline, then on DVD they are flashing, jumping
been having issues with a recent project -- when i use jpeg's, i see them in the browser when played in the timeline, but on the finished DVD they become jittery and sometimes flash a bit. seems like when i freezeframe the jpeg's it solves the proble
-
How many paired and active devices will bluetooth on IPad 3 support at a time ?
How many (Paired and Active devices) will Bluetooth on the Ipad 3 sopport at a time?
-
SimAlliance Loader for JavaCards - Question
Hello everybody I have a question about the SimAlliance Loader for Javacards. I found this tool at www.simalliance.org. My question is about the "Memory Configuration", there are three fields to fill out. 1. Package Non Volatile Memory Size (in bytes