Operation Manual – VLAN
H3C S3610&S5510 Series Ethernet Switches
Chapter 2 Voice VLAN Configuration
2-4
Caution:
z
If the voice traffic sent by an IP phone is tagged and that the access port has 802.1x
authentication and Guest VLAN enabled, assign different VLAN IDs for the voice
VLAN, the default VLAN of the access port, and the 802.1x guest VLAN.
z
If the voice traffic sent by an IP phone is untagged, to realize the voice VLAN feature,
the default VLAN of the access port can only be configured as the voice VLAN. Note
that at this time 802.1 x authentication function cannot be realized.
Note:
z
The default VLAN for all ports is VLAN 1. Using commands, users can either
configure the default VLAN of a port, or configure to allow a certain VLAN to pass
through the port. For more information, refer to section
z
Use the
display interface
command to display the default VLAN and the VLANs
that are allowed to go through a certain port.
2.1.2 Security Mode and Normal Mode for the Voice VLAN
Ports that have the voice VLAN feature enabled can be divided into two modes based
on their filtering mechanisms applied to inbound packets.
z
Security mode: only voice packets with source OUI MAC addresses can pass
through the inbound port (with the voice VLAN feature enabled), other non-voice
packets will be discarded, including authentication packets, such as 802.1x
authentication packet.
z
Normal mode: both voice packets and non-voice packets are allowed to pass
through an inbound port (with the voice VLAN feature enabled), the former will
abide by the voice VLAN forwarding mechanism whereas the latter normal VLAN
forwarding mechanism.
It is recommended that you do not mix voice packets with other types of data in a voice
VLAN. If necessary, please ensure that the security mode is disabled.
2.2 Configuring Voice VLAN
2.2.1 Configuration Prerequisites
z
Create the corresponding VLAN before configuring the voice VLAN;
z
As a default VLAN, VLAN 1 does not need to be created. However, it cannot be
enabled with the voice VLAN feature.
