There are models/brands of switches that offer the feature to accept LLDP packets over a 802.1x blocked port. For example Brocade has #lldp-pass-through [URL] I cannot find any feature like this on the 70xx switches. The guest VLAN will not have access to the rest of internal LAN, but will have internet access. So theoretically all the phones would not be able to authenticate, place them on the guest VLAN, and they would still be able to hit external network. But if they rely on anything else in the network, like a DHCP server, they would not be able to communicate with it. I don't know of a way to work around this. 
Hi, We currently have a few stacks of 7048Ps as our office switches. We have both IP phones and computers, they each have their own individual ports on the switch (so no phone to PC daisy chaining). Currently we have all the access ports on the same settings: 1. native vlan is data vlan2. LLDP-MED assigns voice vlan When a phone is plugged into the switch LLDP-MED assigns it to the voice vlan and when a PC is plugged in it stays on the data vlan. We're needing to put in 802.1X in the near future and unfortunately our phones don't support 802.1X so I was wondering how these two (802.1X and LLDP-MED) play together and if there's any interoperability. I realise I could add all the MAC addresses of the phone into AD and use them as MAB access but that's not a particularly appealing option to me. I was wondering if it's possible to still have LLDP-MED assign the voice vlan and allow traffic for a device that doesn't respond to 802.1X requests? How would I do this?
lldp-med and 802.1x