Security Mode And Normal Mode Of Voice Vlans; Configuring A Voice Vlan; Configuration Prerequisites - H3C LS-3100-52P-OVS-H3 Operation Manual

If an IP phone sends tagged voice traffic and its connecting port is configured with 802.1X
authentication and guest VLAN, you should assign different VLAN IDs for the voice VLAN, the default
VLAN of the connecting port, and the 802.1X guest VLAN.
The default VLANs for all ports are VLAN 1. You can configure the default VLAN of a port and
configure a port to permit a certain VLAN to pass through with commands. For more information,
refer to Port-Based VLAN
Use the display interface command to display the default VLAN of a port and the VLANs
permitted to pass through the port.

Security Mode and Normal Mode of Voice VLANs

Voice VLAN-enabled ports can operate in security mode or normal mode based on their inbound packet
filtering mechanisms.
Security mode: only voice packets whose source MAC addresses comply with the recognizable
OUI addresses can pass through the voice VLAN-enabled inbound port, while other non-voice
packets are dropped, including authentication packets, such as 802.1X authentication packets.
Normal mode: both voice packets and non-voice packets are allowed to pass through a voice
VLAN-enabled inbound port. Voice packets are forwarded according to the voice VLAN forwarding
mechanism whereas the non-voice packets are forwarded according to the normal VLAN
forwarding mechanism.
It is recommended not to transmit both voice packets and non-voice packets in a voice VLAN. If
necessary, please ensure that the voice VLAN security mode is disabled.

Configuring a Voice VLAN

Configuration Prerequisites

Before configuring a VLAN as a voice VLAN, create the VLAN first. Note that you cannot configure
VLAN 1 (the system-default VLAN) as a voice VLAN.
Configuration.
3-3