Configuring Voice VLAN 101
c
CAUTION:
■ If the voice traffic sent by an IP phone is tagged and that the access port has
802.1x authentication and Guest VLAN enabled, assign different VLAN IDs for
the voice VLAN, the default VLAN of the access port, and the 802.1x guest
VLAN.
■ If the voice traffic sent by an IP phone is untagged, to realize the voice VLAN
feature, the default VLAN of the access port can only be configured as the
voice VLAN. Note that at this time 802.1 x authentication function cannot be
realized.
n
■ The default VLAN for all ports is VLAN 1. Using commands, users can either
configure the default VLAN of a port, or configure to allow a certain VLAN to
pass through the port. For more information, refer to section “Port-Based
VLAN Configuration” on page 87.
■ Use the display interface command to display the default VLAN and the
VLANs that are allowed to go through a certain port.
Security Mode and
Normal Mode for the
Voice VLAN
Voice VLAN modes fall into security mode and normal mode based on the filtering
mechanisms of the voice VLAN-enabled ports on the inbound packets. In the two
modes, the voice VLAN-enabled ports process untagged packets and packets with
the voice VLAN tags in different ways, as shown in the following table:
In the two modes, the port processes a packet with other VLAN tag in the same
way, that is, forwards the packet if the VLAN is allowed on the port, or discards
the packet if the VLAN is not allowed on the port.
It is recommended that you do not mix voice packets with other types of data in a
voice VLAN. If necessary, please ensure that the security mode is disabled.
Configuring Voice
VLAN
Configuration
Prerequisites
■ Create the corresponding VLAN before configuring the voice VLAN;
■ As a default VLAN, VLAN 1 does not need to be created. However, it cannot be
enabled with the voice VLAN feature.
Configuring Voice VLAN
Mode on a Port to
Automatic Mode
Follow these steps to set the port voice VLAN mode to automatic:
Voice VLAN mode Inbound packet type Processing way
Security mode Untagged packets If the source MAC addresses of the
packets are OUI addresses that can be
identified by the system, send the
packets to the voice VLAN; otherwise,
discard the packets.
Packets with the voice VLAN tag
Normal mode Untagged packets The packet source MAC address will
not be checked, and all packets can be
transmitted in the voice VLAN.
Packets with the voice VLAN tag
To do… Use the command… Remarks
Enter system view system-view -
To Next Page
Loading...
