Security Mode And Normal Mode Of Voice Vlans - 3Com 4500G Family Configuration Manual

Table 3-3 Required configurations on ports of different links types in order for the ports to support
tagged voice traffic
Port link type
Access
Trunk
Hybrid
If an IP phone sends tagged voice traffic and its connecting port is configured with 802.1X
authentication and guest VLAN, you should assign different VLAN IDs for the voice VLAN, the
default VLAN of the connecting port, and the 802.1X guest VLAN.
If an IP phone sends untagged voice traffic, to realize the voice VLAN feature, you must configure
the default VLAN of the connecting port as the voice VLAN. In this case 802.1X authentication
function cannot be realized.
The default VLANs for all ports are VLAN 1. You can configure the default VLAN of a port and
configure a port to permit a certain VLAN to pass through with commands. For more information,
refer to Port-Based VLAN
Use the display interface command to display the default VLAN of a port and the VLANs
permitted to pass through the port.

Security Mode and Normal Mode of Voice VLANs

Voice VLAN-enabled ports can operate in security mode or normal mode based on their inbound packet
filtering mechanisms.
In a safe network, you can configure the voice VLANs to operate in normal mode, thus reducing the
consumption of system resources due to source MAC addresses checking. It is recommended not to
transmit both voice packets and non-voice packets in a voice VLAN. If you have to, please ensure that
the voice VLAN security mode is disabled.
Voice VLAN Support for
assignment untagged voice
mode
Automatic No
Manual Yes
Automatic No
Manual Yes
Automatic No
Manual Yes
Configuration.
Configuration requirements
traffic
—
Configure the default VLAN of the port as
the voice VLAN.
—
Configure the default VLAN of the port as
the voice VLAN and assign the port to the
voice VLAN.
—
Configure the default VLAN of the port as
the voice VLAN and configure the port to
permit packets of the voice VLAN to pass
through untagged.
3-4