8/19/2019 Avaya VoIP Phone With Cisco Switch and CPPM
1/5
Avaya VoIP Phone with Cisco Switch and CPPM
The purpose of this document is to provide the setup and
methodology on how to
congure CPPM, the Cisco Switch, and DHCP server in order for the
phone to be
MC authenticated and the Computer behind the phone to be
authenticated via
!"#$%&$ This document assumes that basic conguration has
been completed
'switch, dhcp relay for prole information, !"#$%&
authentication, Proling Service%,
Cisco !"#$%& Switch uthentication#, and a generic catch(all
radius service)$ This
document will focus on an vaya *+"" o-P phone, though the
process should be
similar for any o-P phone$
.or the most part, o-P phones do not do !"#$%&
authentication$ -nstead, the !"#$%&
authentication is passed from the computer through the phone to
the switch$ /ut
how do we authenticate that phone without opening up the port to
a situation wheremultiple clients could connect to a single
!"#$%& port0 -n the Cisco world, the
answer is multi(domain authentication$ This is designed
specically for a o-P
phone$ The port on the Cisco switch does MC authentication for
the o-P phone,
detects the 11DP on the phone, wor2s with 3D-4S responses from
CPPM, and tags
the port for the oice 15$ -n con6unction with that, the DHCP
server sends the
phone specic 15 instructions when it tries to connect on the
default 'untagged)
15 of the port$ Here is a brea2down of the process7
%$ Switch port does a MC authentication of the Phone, Phone must
pass to
go further
#$ CPPM sends bac2 information to the switch that this is a
phone, to behandled specially 'as not to cause a port violation,
hence the multi(
domain)8$ Phone attempts to connect to 15 " 'this 6ust means no
15, untagged
tra9c)*$ Phone gets a DHCP response with the 15 it should be
on:$ Phone resets and attempts to connect to oice 15+$ gain CPPM
responds with information to the switch that this is a phone;$
Phone is allowed onto the oice 15
This should all happen with minimal interruption to the
computer plugged into
phone$ The computer will need to re(authenticate when the phone
restarts after ithas received the proper 15 information from the
DHCP server$
Step 1: Additional Cisco Switch ConfgurationSeveral additional
settings need to be congured on the Cisco switch$ .irst we need
to enable 11DP and
8/19/2019 Avaya VoIP Phone With Cisco Switch and CPPM
2/5
The ne&t step is to congure the port to handle voice
tra9c on a di>erent 'tagged)
15$ -n the Cisco world, we do this without ma2ing the port a
trun2 port$ The port
remains in access mode but tags tra9c for the voice 15$ Here are
the commands
to set that up '2eep in mind we created the voice 15 #"" in the
Cisco Switch
document#)7
CPPM-Demo-3750(config)# interface fastEternet !"0"$
CPPM-Demo-3750(config-if)# s%itcport &oice &lan 00
CPPM-Demo-3750(config-if)# autentication ost-mode
multi-domain
CPPM-Demo-3750(config-if)# e'it
?ne thing to note is the @authentication host(mode multi(domainA
command$ Thiscommand may di>er on di>erent Cisco switch
models$ ?n other switches, such as
the #B+", the command may be the following7 dot%& host(mode
multi(domain$ This
@multi(domainA option allows us to MC authenticate the phone on
the same port as
we !"#$%& authenticate the computer$
Step 2: DCP !ptions "or Avaya Phones-n my case, - am using an
ruba 8#"" controller as a basic DHCP server 'this is not
recommended for production)$ -n my DHCP scope for 15 888
'initial 15) and
15 #"" 'voice 15) - added the following options7
option !7 te't *+,!*+.*/,00.*/1E21,0
option $ te't *+,!*+.*/,00.*/1E21,0
?ption %;+ is used for most vaya phones$ ?ption #*# is used for
the B series
phones$ 1#
