Security Mode And Normal Mode Of Voice Vlans - H3C S5120-SI Series Configuration Manual

Table 2-3 Required configurations on ports of different links types in order for the ports to support
tagged voice traffic
Port link type
Access
Trunk
Hybrid
If an IP phone sends tagged voice traffic and its connecting port is configured with 802.1X
authentication and guest VLAN, you should assign different VLAN IDs for the voice VLAN, the
default VLAN of the connecting port, and the 802.1X guest VLAN.
If an IP phone sends untagged voice traffic, to realize the voice VLAN feature, you must configure
the default VLAN of the connecting port as the voice VLAN. In this case 802.1X authentication
function cannot be realized.
The default VLANs for all ports are VLAN 1. You can configure the default VLAN of a port and
configure a port to permit a certain VLAN to pass through with commands. For more information,
refer to Port-Based VLAN
Use the display interface command to display the default VLAN of a port and the VLANs
permitted to pass through the port.

Security Mode and Normal Mode of Voice VLANs

Voice VLAN-enabled ports can operate in security mode or normal mode based on their inbound packet
filtering mechanisms.
Normal mode: In this mode, both voice packets and non-voice packets are allowed to pass through
a voice VLAN-enabled inbound port. When receiving a voice packet, the port forwards it without
checking its source MAC address against the OUI addresses configured for the device. If the
default VLAN of the port is the voice VLAN and the port works in manual VLAN assignment mode,
Voice VLAN Support for
assignment untagged voice
mode
Automatic No
Manual Yes
Automatic No
Manual Yes
Automatic No
Manual Yes
Configuration.
Configuration requirements
traffic
—
Configure the default VLAN of the port as
the voice VLAN.
—
Configure the default VLAN of the port as
the voice VLAN and assign the port to the
voice VLAN.
—
Configure the default VLAN of the port as
the voice VLAN and configure the port to
permit packets of the voice VLAN to pass
through untagged.
2-4