Configuring A Voice Vlan; Configuration Prerequisites - HP 3600 v2 series Configuration Manual

manual VLAN assignment mode, the port forwards all received untagged packets in the voice
VLAN. In normal mode, voice VLANs are vulnerable to traffic attacks. Malicious users might send
large quantities of forged voice packets to consume the voice VLAN bandwidth, affecting normal
voice communication.
Security mode: Only voice packets whose source MAC addresses match the recognizable OUI
•
addresses can pass through the voice VLAN-enabled inbound port, but all other packets are
dropped.
In a safe network, you can configure the voice VLANs to operate in normal mode, reducing the
consumption of system resources due to source MAC addresses checking.
TIP:
HP does not recommend you transmit both voice traffic and non-voice traffic in a voice VLAN. If you must
transmit both voice traffic and nonvoice traffic, make sure that the voice VLAN security mode is disabled.
Table 18 How a voice VLAN-enabled port processes packets in security and normal mode
Voice VLAN
mode
Security mode
Normal mode

Configuring a voice VLAN

Configuration prerequisites

Before you configure a voice VLAN, complete the following tasks:
• Create a VLAN.
Configure QoS priority settings for voice VLAN traffic on an interface before you enable voice
•
VLAN on the interface.
If the configuration order is reversed, your priority configuration will fail. For more information, see
"Configuring QoS priority settings for voice traffic on an
Configure the voice VLAN assignment mode.
•
For more information, see
and "Configuring a port to operate in manual voice VLAN assignment
Packet type
Untagged packets
Packets that carry the voice
VLAN tag
Packets that carry other
tags
Untagged packets
Packets that carry the voice
VLAN tag
Packets that carry other
tags
"Configuring a port to operate in automatic voice VLAN assignment
Packet processing mode
If the source MAC address of a packet matches an OUI
address configured for the device, it is forwarded in the voice
VLAN; otherwise, it is dropped.
Forwarded or dropped depending on whether the port allows
packets of these VLANs to pass through
The port does not determine the source MAC addresses of
inbound packets. In this way, both voice traffic and non-voice
traffic can be transmitted in the voice VLAN.
Forwarded or dropped depending on whether the port allows
packets of these VLANs to pass through
interface."
155
mode."
mode"