H3C S5120-EI Series, Operation Manual

Page: 166 / 1191

3-4
Table 3-3
Required configurations on ports of different links types in order for the ports to support
tagged voice traffic
Port link type
Voice VLAN
assignment
mode
Support for
untagged voice
traffic
Configuration requirements
Automatic No —
Access
Manual Yes
Configure the default VLAN of the port as
the voice VLAN.
Automatic No —
Trunk
Manual Yes
Configure the default VLAN of the port as
the voice VLAN and assign the port to the
voice VLAN.
Automatic No —
Hybrid
Manual Yes
Configure the default VLAN of the port as
the voice VLAN and configure the port to
permit packets of the voice VLAN to pass
through untagged.
z
If an IP phone sends tagged voice traffic and its connecting port is configured with 802.1X
authentication and guest VLAN, you should assign different VLAN IDs for the voice VLAN, the
default VLAN of the connecting port, and the 802.1X guest VLAN.
z
If an IP phone sends untagged voice traffic, to realize the voice VLAN feature, you must configure
the default VLAN of the connecting port as the voice VLAN. In this case 802.1X authentication
function cannot be realized.
z
The default VLANs for all ports are VLAN 1. You can configure the default VLAN of a port and
configure a port to permit a certain VLAN to pass through with commands. For more information,
refer to
Port-Based VLAN Configuration .
z
Use the
display interface
command to display the default VLAN of a port and the VLANs
permitted to pass through the port.
Security Mode and Normal Mode of Voice VLANs
Voice VLAN-enabled ports can operate in security mode or normal mode based on their inbound packet
filtering mechanisms.
In a safe network, you can configure the voice VLANs to operate in normal mode, thus reducing the
consumption of system resources due to source MAC addresses checking. It is recommended not to
transmit both voice packets and non-voice packets in a voice VLAN. If you have to, please ensure that
the voice VLAN security mode is disabled.