dot1x voice vlan
Syntax
dot1x voice vlan vlan-id
undo dot1x voice vlan
View
Ethernet interface view
Default level
2: System level
Parameters
vlan-id: Specifies a voice VLAN by its ID in the range of 1 to 4094. The VLAN must have been created.
Description
Use dot1x voice vlan to configure an 802.1X voice VLAN on a port.
Use undo dot1x voice vlan to remove the 802.1X voice VLAN on a port.
By default, no 802.1X voice VLAN is configured on a port.
This command must function with a remote authentication server (for example, FreeRADIUS). It cannot work with the RADIUS server provided by IMC.
To ensure a correct exchange of 802.1X EAPOL packets, you must configure the dot1x eapol untag command. For information about how to configure this command, see Security Configuration Guide.
The server-assigned authorization VLAN takes precedence over the 802.1X voice VLAN on a port. The port will be assigned to the authorization VLAN if both VLANs coexist. For information about 802.1 X VLAN manipulations, see Security Configuration Guide.
Before you configure an 802.1X voice VLAN on a port, perform the following tasks:
Enable 802.1X on the port.
Set the port type to hybrid or trunk, because the port is assigned to the 802.1X voice VLAN as a tagged member. For information about port types, see Layer 2—LAN Switching Configuration Guide.
Configure LLDP or CDP compatibility on the device. For information about the LLDP and CDP compatibility features, see Layer 2—LAN Switching Configuration Guide.
Examples
# Configure VLAN 20 as the 802.1X voice VLAN on Ethernet 1/0/1.
<Sysname> system-view [Sysname] interface ethernet1/0/1 [Sysname-Ethernet1/0/1] dot1x voice vlan 20