I am using Juniper ex4200-48p running JUNOS Base OS boot [12.3R6.6]
I have a dot1x environment, using Cisco ISE
All my ports are under dot1x control (via Cisco ISE) and are working as expected
However I need to temporarily turn dot1x off
I am testing on a port and I have removed it from my Cisco ISE interface group
The test port is as follows
edit interfaces ge-2/0/17 unit 0]
simon.young@BOH2-NET-SWA401# show
family ethernet-switching {
port-mode access;
vlan {
members DATA;
}
}
# show
voip {
interface access-ports {
vlan VoIP;
}
}
storm-control {
interface all;
}
The Mitel phone (08:00:0f:bf:9a:84) appears on both VLANs and does not age out of the DATA VLAN
{master:0}[edit ethernet-switching-options]
simon.young@BOH2-NET-SWA401# run show ethernet-switching table interface ge-2/0/17.0
Ethernet-switching table: 3 unicast entries
VLAN MAC address Type Age Interfaces
CMS * Flood - All-members
DATA 08:00:0f:bf:9a:84 Learn 0 ge-2/0/17.0
DATA a4:4c:c8:56:ee:3b Learn 0 ge-2/0/17.0
VoIP * Flood - All-members
VoIP 08:00:0f:bf:9a:84 Learn 0 ge-2/0/17.0
{master:0}[edit ethernet-switching-options]
The phone works but I am concerned that it appears in both VLANs? I convinced this will cause me issues?
↧
Phone in both VoiP and Data VLANs
↧