Security Mode and
Normal Mode for the
Voice VLAN
Configuring Voice
VLAN
Configuration
Prerequisites
Configuring Voice VLAN
Mode on a Port to
Automatic Mode
c
CAUTION:
If the voice traffic sent by an IP phone is tagged and that the access port has
■
802.1x authentication and Guest VLAN enabled, assign different VLAN IDs for
the voice VLAN, the default VLAN of the access port, and the 802.1x guest
VLAN.
If the voice traffic sent by an IP phone is untagged, to realize the voice VLAN
■
feature, the default VLAN of the access port can only be configured as the
voice VLAN. Note that at this time 802.1 x authentication function cannot be
realized.
n
The default VLAN for all ports is VLAN 1. Using commands, users can either
■
configure the default VLAN of a port, or configure to allow a certain VLAN to
pass through the port. For more information, refer to section "Port-Based
VLAN Configuration" on page 87.
Use the display interface command to display the default VLAN and the
■
VLANs that are allowed to go through a certain port.
Voice VLAN modes fall into security mode and normal mode based on the filtering
mechanisms of the voice VLAN-enabled ports on the inbound packets. In the two
modes, the voice VLAN-enabled ports process untagged packets and packets with
the voice VLAN tags in different ways, as shown in the following table:
Voice VLAN mode Inbound packet type
Security mode
Normal mode
In the two modes, the port processes a packet with other VLAN tag in the same
way, that is, forwards the packet if the VLAN is allowed on the port, or discards
the packet if the VLAN is not allowed on the port.
It is recommended that you do not mix voice packets with other types of data in a
voice VLAN. If necessary, please ensure that the security mode is disabled.
Create the corresponding VLAN before configuring the voice VLAN;
■
As a default VLAN, VLAN 1 does not need to be created. However, it cannot be
■
enabled with the voice VLAN feature.
Follow these steps to set the port voice VLAN mode to automatic:
To do...
Enter system view
Untagged packets
Packets with the voice VLAN tag
Untagged packets
Packets with the voice VLAN tag
Use the command...
system-view
Configuring Voice VLAN
Processing way
If the source MAC addresses of the
packets are OUI addresses that can be
identified by the system, send the
packets to the voice VLAN; otherwise,
discard the packets.
The packet source MAC address will
not be checked, and all packets can be
transmitted in the voice VLAN.
Remarks
-
101