Security Mode And Normal Mode For The Voice Vlan - H3C S5500-EI series Operation Manual

Operation Manual – VLAN
H3C S5500-EI Series Ethernet Switches
Caution:
If the voice traffic sent by an IP phone is tagged and that the access port has 802.1x
authentication and Guest VLAN enabled, assign different VLAN IDs for the voice
VLAN, the default VLAN of the access port, and the 802.1x guest VLAN.
If the voice traffic sent by an IP phone is untagged, to realize the voice VLAN feature,
the default VLAN of the access port can only be configured as the voice VLAN. Note
that at this time 802.1 x authentication function cannot be realized.
Note:
The default VLAN for all ports is VLAN 1. Using commands, users can either
configure the default VLAN of a port, or configure to allow a certain VLAN to pass
through the port. For more information, refer to section
Configuration.
Use the display interface command to display the default VLAN and the VLANs
that are allowed to go through a certain port.

2.1.2 Security Mode and Normal Mode for the Voice VLAN

Voice VLAN modes fall into security mode and normal mode based on the filtering
mechanisms of the voice VLAN-enabled ports on the inbound packets. In the two
modes, the voice VLAN-enabled ports process untagged packets and packets with the
voice VLAN tags in different ways, as shown in the following table:
Voice VLAN mode
Security mode
Normal mode
Inbound packet type
Untagged packets
Packets with the voice
VLAN tag
Untagged packets
Packets with the voice
VLAN tag
2-4
Chapter 2 Voice VLAN Configuration
Port-Based VLAN
Processing way
If the source MAC
addresses of the packets
are OUI addresses that
can be identified by the
system, send the packets
to the voice VLAN;
otherwise, discard the
packets.
The packet source MAC
address will not be
checked, and all packets
can be transmitted in the
voice VLAN.