<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On 17 Apr 2014, at 15:28, Arran Cudbard-Bell wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div><br>On 17 Apr 2014, at 09:12, Alex Sharaz <<a href="mailto:alex.sharaz@york.ac.uk">alex.sharaz@york.ac.uk</a>> wrote:<br><br><blockquote type="cite">One word of caution if you are planning on supporting VOIP phones with ability to connect a client to the network port on a phone. I tried using RFC 4675 to specify a tagged vlan for the phone and mac/dot1x auth for the "other" device on a 2620. It works ..... for about 2 weeks and then the switch locks up reboot .... and it then works for another 2 weeks. Better than a 2610 which then reboots! Manually configuring the switch to support lldp-med works though.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Apparently the 2600 series doesn't support RFC4675 .... took while to find that out :-((<br></blockquote><br>I'm pretty sure they do support tagged VLANs, you should log a bug report with HP, they are generally responsive.<br><br></div></blockquote><div><br></div>oops sorry, meant that you can't use the RADIUS attribute to tell the switch which vlan to put the ipphone into. You can define a vlan for voice, define it as a voice vlan and tag ports into it. </div><div><br></div><div>vlan <number> name voice_vlan</div><div> voice</div><div> tagged 1-48</div><div>!</div><div><br></div><div>Then when you plug a phone into any of ports 1-48 there'll be a tagged link to the phone for the voice vlan.</div><div><br></div><div>Wot you can't do is</div><div><br></div><div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Thu Mar 27 15:45:57 2014 : Info: Sending Access-Accept packet to host 10.4.72.5 port 1812, id=41, length=0<o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Thu Mar 27 15:45:57 2014 : Info: HP-Egress-VLANID = 822084526</div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Thu Mar 27 15:45:57 2014 : Info: HP-Port-Client-Limit-MA = 4<o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Thu Mar 27 15:45:57 2014 : Info: HP-Port-Client-Limit-Dot1x = 4</div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Thu Mar 27 15:45:57 2014 : Info: Acct-Interim-Interval = 1800<o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Thu Mar 27 15:45:57 2014 : Info: Termination-Action = RADIUS-Request<o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Thu Mar 27 15:45:57 2014 : Info: Session-Timeout = 28800</div></div></div><div><br></div><div>everything appears to work ... for about 2 weeks then the switch locks up. On the 2610 worse,plug the phone into a port and the switch reboots. Switch of radius accounting and you have the same functionality as a 2620... for 'bout the same length of time.</div><div><br></div><div>Spent about a month with 2 fault calls logged until Jason Luckett said that RFC 4... isn;t supported on 2600 series switches.</div><div>Rgds</div><div>A</div><div><br><blockquote type="cite"><div>They should send you a debug build with the ASSERTS turned on, which should help track the problem down.<br><br>Ask for Tonny Mulder, or Marinus Rosenbrand when you get through to EMEA support. If they're uncooperative<br>contact me off list and and i'll help you get it fixed.<br><br>Arran Cudbard-Bell <<a href="mailto:a.cudbardb@freeradius.org">a.cudbardb@freeradius.org</a>><br>FreeRADIUS Development Team<br><br>FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2<br><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></div></blockquote></div><br></body></html>