Solved

Assigning Device to a vlan based on Mac Address Cisco

Posted on 2010-11-11
6
939 Views
Last Modified: 2012-05-10
Hello, I have a Cisco switched network environment consisting of two vlans, vlan1 for data and vlan2 for voice.  
We have several Polycom video endpoints which are moved among various switch ports throughout our building.  Unfortunately these same switch ports may also be used for data connection.  
Is there a way to ensure that these Polycom units end up in vlan2 at all times?
They use fixed IP addresses.  
0
Comment
Question by:mrbodjagles
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 2

Expert Comment

by:omesie
ID: 34117289
I think the best solution for the polycom phones is the way I have configured mine (of course :) )
leave all ports untagged on VLAN 1 so that any PC that connects to it picks up the data vlan (VLAN1) and leave VLAN2 as tagged.  You'll then need to configure all polycom phones to use tagged mode.  You should be able to go in to the network menu on the phones and select VLAN2.
That will automatically select VLAN2 when it connects to the network.

I don't use polycom video endpoints but use polycom phones company wide with DHCP and that's how they're configured... all VoIP is on VLAN 7 and all Polycom phones are configured to use VLAN 7
0
 
LVL 22

Expert Comment

by:eeRoot
ID: 34122050
It depends on which switches you have on your network, buy you might be able to use a VLAN ACL.
http://www.cisco.com/en/US/docs/switches/datacenter/sw/4_1/nx-os/security/configuration/guide/sec_vlanacls.pdf

Depending on your model of video camera, they may support being forwarded to a particular VLAN, based on a DCHP scope option.  You could then set DHCP IP reservations so the camera still keep their IP's.
0
 

Author Comment

by:mrbodjagles
ID: 34124677
Thanks for the suggestion, there is no way to configure the Polycom Video endpoints to use tagging.  
0
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 34133728
What you're looking for is Dynamic VLAN assignment, based on MAC address. This article explains the requirements and how it works.
http://www.firewall.cx/vlans-designing-vlans-dynamic-vlans.php
0
 
LVL 69

Expert Comment

by:Qlemo
ID: 34488491
This question has been classified as abandoned and is being closed as part of the Cleanup Program.  See my comment at the end of the question for more details.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cisco 2960 PACL 9 113
stacking switches 2 73
Line cards, Supervisor, Control plane 7 61
Switch ports not working 8 70
The worst thing when starting a new job is when the previous Network Administrator left behind no documentation. How do you get into the devices? If you've been in this situation or just accidently mistyped your password, this article will hopefully…
I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question