Specifications

Configuring Authentication
April 15, 2011 Page 20 of 36
Procedure 5describesthestepstoconfigureCEP.
Setting MultiAuth Idle and Session Timeout for CEP
ThereisnomeansofdetectingifaSiemens,SIP,orH323phonegoesawayotherthaninthecaseof
alinkdown.Therefore,ifthesetypesofphonesarenotdirectlyconnectedtotheswitchportand
thephonegoesaway,theswitchwillstillseethephoneconnection
andanyconfiguredpolicywill
remainontheport.DetectedCEPswillberemovedfromtheconnectiontableiftheydonotsend
trafficforatimeequaltotheMultiAuthauthenticationidletimeoutvalue.CEPsarealsoremoved
ifthetotaldurationofthesessionexceedsthetimespecified
intheMultiAuthauthentication
sessiontimeout.
3. Specify the CEP device IP address and mask or
set to unknown.
set cep detection-id id address {ip-address |
unknown} mask {mask | unknown}
4. Set the CEP detection group protocol. set cep detection-id id protocol {tcp | udp |
both | none}
5. Set the maximum or minimum port for the TCP
or UDP group protocol.
set cep detection-id id {porthigh | portlow}
port
Procedure 5 CEP Configuration
Step Task Command(s)
1. Determine the policy profile index of the profile
you wish to associate with a CEP type.
show policy profile all
2. Associate a policy profile with a CEP type. set cep policy {cisco | h323 | siemens | sip}
policy-index
3. Enable or disable the CEP device port for the
CEP type
set cep port port-string cep-type enable
set cep port port-string cep-type disable
4. If you are using the Cisco discovery protocol,
enable the Cisco discovery protocol. You can
also optionally set the voice VLAN ID, whether
tagged traffic is trusted or untrusted, and 802.1X
priority transmitted to the Cisco IP phone to
format in the 802.1Q VLAN tag of its VoIP traffic.
set ciscodp port { [status {disable | enable}]
[ vvid {vlan-id | none | dot1p | untagged}]
[trust-ext {trusted | untrusted}] [cos-ext
value] } port-string
5. If the Cisco discovery protocol is enabled on any
port, enable the Cisco discovery protocol
globally.
set ciscodp status
6. Globally enable or disable CEP on the switch. set cep enable
set cep disable
7. Set the MultiAuth mode. set multiauth mode multi
8. Display CEP connections, detection, policy and
port settings.
show cep {connections | detection | policy
| port}
Procedure 4 CEP Detection Group Configuration (continued)
Step Task Command(s)