Switchport Voice Vlan Security - Edge-Core ECS4610-24F Management Manual

D
EFAULT
OUI: Enabled
LLDP: Disabled
C
OMMAND
Interface Configuration
C
OMMAND
◆
◆
E
XAMPLE
The following example enables the OUI method on port 1 for detecting
VoIP traffic.
Console(config)#interface ethernet 1/1
Console(config-if)#switchport voice vlan rule oui
Console(config-if)#
This command enables security filtering for VoIP traffic on a port. Use the
switchport voice
no form to disable filtering on a port.
vlan security
S
YNTAX
D
EFAULT
Disabled
C
OMMAND
Interface Configuration
C
OMMAND
◆
◆
S
ETTING
M
ODE
U
SAGE
When OUI is selected, be sure to configure the MAC address ranges in
the Telephony OUI list (see the
address OUI numbers must be configured in the Telephony OUI list so
that the switch recognizes the traffic as being from a VoIP device.
LLDP checks that the "telephone bit" in the system capability TLV is
turned on. See "LLDP Commands" on page 951
LLDP.
[no] switchport voice vlan security
S
ETTING
M
ODE
U
SAGE
Security filtering discards any non-VoIP packets received on the port
that are tagged with the voice VLAN ID. VoIP traffic is identified by
source MAC addresses configured in the Telephony OUI list, or through
LLDP that discovers VoIP devices attached to the switch. Packets
received from non-VoIP sources are dropped.
When enabled, be sure the MAC address ranges for VoIP devices are
configured in the Telephony OUI list
– 869 –
| VLAN Commands
C 36
HAPTER
Configuring Voice VLANs
voice vlan mac-address
for more information on
(voice vlan mac-address).
command. MAC