Understanding 802.1X And Voip On Ex Series Switches - Juniper JUNOS OS 10.3 - SOFTWARE Manual

Complete Software Guide for Junos

Understanding 802.1X and VoIP on EX Series Switches

2542
®
OS for EX Series Ethernet Switches, Release 10.3
Configuring LLDP-MED (CLI Procedure) on page 2624
When you use Voice over IP (VoIP), you can connect IP telephones to the switch and
configure IEEE 802.1X authentication for 802.1X-compatible IP telephones. The 802.1X
authentication provides network edge security, protecting Ethernet LANs from
unauthorized user access.
VoIP is a protocol used for the transmission of voice through packet-switched networks.
VoIP transmits voice calls using a network connection instead of an analog phone line.
When VoIP is used with 802.1X, the RADIUS server authenticates the phone, and Link
Layer Discovery Protocol–Media Endpoint Discovery (LLDP-MED) provides the
class-of-service (CoS) parameters to the phone.
You can configure 802.1X authentication to work with VoIP in multiple supplicant or
single supplicant mode. In multiple-supplicant mode, the 802.1X process allows multiple
supplicants to connect to the interface. Each supplicant will be authenticated individually.
For an example of a VoIP multiple supplicant topology, see Figure 49 on page 2542.
Figure 49: VoIP Multiple Supplicant Topology
If an 802.1X-compatible IP telephone does not have an 802.1X host but has another
802.1X-compatible device connected to its data port, you can connect the phone to an
interface in single-supplicant mode. In single-supplicant mode, the 802.1X process
authenticates only the first supplicant. All other supplicants who connect later to the
Copyright © 2010, Juniper Networks, Inc.