An administrator implements LLDP-MED on an EX Series switch network. To prevent unauthorized devices from masquerading as IP phones and requesting voice VLAN access, which feature should be combined with LLDP-MED?
IEEE 802.1X port-based authentication with dynamic VLAN assignment verifies device identity against a RADIUS server before granting network access, then assigns the voice VLAN only after successful authentication. This prevents rogue devices from spoofing LLDP-MED TLVs to obtain voice VLAN membership, satisfying the requirement to block unauthorised masquerading as IP phones.
Why this answer
MAC Radius or 802.1X authentication combined with VLAN assignment and LLDP-MED ensures security before voice policies are trusted.