Security Mode And Normal Mode Of Voice Vlan - 3Com MSR 50 Series Configuration Manual

c
n
Security Mode and
Normal Mode of Voice
VLAN
Voice VLAN
operating mode Voice traffic type
Manual mode Tagged voice traffic
Untagged voice traffic Access: supported provided that the default
CAUTION:
If the voice traffic sent by an IP phone is tagged and that the access port has
■
802.1x authentication and Guest VLAN enabled, assign different VLAN IDs for
the voice VLAN, the default VLAN of the access port, and the 802.1x guest
VLAN.
If the voice traffic sent by an IP phone is untagged, to realize the voice VLAN
■
feature, the default VLAN of the access port can only be configured as the
voice VLAN. Note that at this time 802.1 x authentication function cannot be
realized.
The default VLANs for all ports are VLAN 1. Using commands, users can either
■
configure the default VLAN of a port, or configure to allow a certain VLAN to
pass through the port. For more information, refer to
Port-Based VLAN" on page
Use the display interface command to display the default VLAN and the
■
VLANs that are allowed to go through a certain port.
Ports that have the voice VLAN feature enabled can be divided into two modes
based on their filtering mechanisms applied to inbound packets.
Security mode: only voice packets with source OUI MAC addresses can pass
■
through the inbound port (with the voice VLAN feature enabled), other
non-voice packets will be discarded, including authentication packets, such as
802.1 authentication packet.
Normal mode: both voice packets and non-voice packets are allowed to pass
■
through an inbound port (with the voice VLAN feature enabled), the former
will abide by the voice VLAN forwarding mechanism whereas the latter normal
VLAN forwarding mechanism.
Introduction to Voice VLAN
Interface link type
Access: not supported
Trunk: supported provided that the default
VLAN of the access port exists and is not a
voice VLAN and that the access port belongs
to the default VLAN
Hybrid: supported provided that the default
VLAN of the access port exists and is not the
voice VLAN. Besides, the voice VLAN must be
in the list of tagged VLANs whose packets can
pass through the access port
VLAN of the access port is a voice VLAN
Trunk: supported provided that the default
VLAN of the access port is a voice VLAN and
that the access port allows packets from the
voice VLAN to pass through
Hybrid port: supported provided that the
default VLAN of the access port is a voice
VLAN and that the voice VLAN is in the list of
untagged VLANs whose packets are allowed
to pass through the access port
491.
499
"Configuring a