Security Mode And Normal Mode Of Voice Vlans - 3Com S7906E Configuration Manual

Voice VLAN
assignment
mode
Manual mode
If an IP phone sends tagged voice traffic and its connecting port is configured with 802.1X
authentication and guest VLAN, you should assign different VLAN IDs for the voice VLAN, the
default VLAN of the connecting port, and the 802.1X guest VLAN.
If an IP phone sends untagged voice traffic, to realize the voice VLAN feature, you must configure
the default VLAN of the connecting port as the voice VLAN. In this case 802.1X authentication
function cannot be realized.
The default VLANs for all ports are VLAN 1. You can configure the default VLAN of a port and
configure a port to permit a certain VLAN to pass through with commands. For more information,
refer to Port-Based VLAN
Use the display interface command to display the default VLAN of a port and the VLANs
permitted to pass through the port.

Security Mode and Normal Mode of Voice VLANs

Voice VLAN-enabled ports can operate in security mode or normal mode based on their inbound packet
filtering mechanisms.
Normal mode: In this mode, both voice packets and non-voice packets are allowed to pass through
a voice VLAN-enabled inbound port. When receiving a voice packet, the port forwards it without
checking its source MAC address against the OUI addresses configured for the device. If the
default VLAN of the port is the voice VLAN and the port works in manual VLAN assignment mode,
the port forwards all received untagged packets in the voice VLAN. In normal mode, the voice
Voice traffic type
Tagged voice traffic
Untagged voice traffic
Configuration.
Port link type
Access: not supported
Trunk: supported if the default VLAN of the connecting
port exists and is not the voice VLAN and the connecting
port belongs to the default VLAN
Hybrid: supported if the default VLAN of the connecting
port exists and is not the voice VLAN
Access: supported if the default VLAN of the connecting
port is the voice VLAN
Trunk: supported if the default VLAN of the connecting
port is the voice VLAN and the connecting port belongs
to the voice VLAN
Hybrid port: supported if the default VLAN of the
connecting port is the voice VLAN
4-3