Security mode and normal mode of voice vlans – H3C Technologies H3C S5120 Series Switches User Manual
Page 157
2-4
Table 2-3 Required configurations on ports of different links types in order for the ports to support
tagged voice traffic
Port link type
Voice VLAN
assignment
mode
Support for
untagged voice
traffic
Configuration requirements
Automatic No
—
Access
Manual Yes
Configure the default VLAN of the port as
the voice VLAN.
Automatic No
—
Trunk
Manual Yes
Configure the default VLAN of the port as
the voice VLAN and assign the port to the
voice VLAN.
Automatic No
—
Hybrid
Manual Yes
Configure the default VLAN of the port as
the voice VLAN and configure the port to
permit packets of the voice VLAN to pass
through untagged.
z
If an IP phone sends tagged voice traffic and its connecting port is configured with 802.1X
authentication and guest VLAN, you should assign different VLAN IDs for the voice VLAN, the
default VLAN of the connecting port, and the 802.1X guest VLAN.
z
If an IP phone sends untagged voice traffic, to realize the voice VLAN feature, you must configure
the default VLAN of the connecting port as the voice VLAN. In this case 802.1X authentication
function cannot be realized.
z
The default VLANs for all ports are VLAN 1. You can configure the default VLAN of a port and
configure a port to permit a certain VLAN to pass through with commands. For more information,
.
z
Use the display interface command to display the default VLAN of a port and the VLANs
permitted to pass through the port.
Security Mode and Normal Mode of Voice VLANs
Voice VLAN-enabled ports can operate in security mode or normal mode based on their inbound packet
filtering mechanisms.
z
Normal mode: In this mode, both voice packets and non-voice packets are allowed to pass through
a voice VLAN-enabled inbound port. When receiving a voice packet, the port forwards it without
checking its source MAC address against the OUI addresses configured for the device. If the
default VLAN of the port is the voice VLAN and the port works in manual VLAN assignment mode,