H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 71)

8-3
If the voice traffic sent by an IP phone is tagged and that the access port has 802.1x authentication and
Guest VLAN enabled, assign different VLAN IDs for the voice VLAN, the default VLAN of the access
port, and the 802.1x guest VLAN.
z
The default VLAN for all ports is VLAN 1. Using commands, users can either configure the default
VLAN of a port, or configure to allow a certain VLAN to pass through the port. For more information,
refer to section
Port-Based VLAN Configuration .
z
Use the display interface command to display the default VLAN and the VLANs that are allowed
to go through a certain port.
Security Mode and Normal Mode for the Voice VLAN
Voice VLAN modes fall into security mode and normal mode based on the filtering mechanisms of the
voice VLAN-enabled ports on the inbound packets. In the two modes, the voice VLAN-enabled ports
process untagged packets and packets with the voice VLAN tags in different ways, as shown in the
following table:
Voice VLAN mode Inbound packet type Processing way
Untagged packets
Security mode
Packets with the voice VLAN tag
If the source MAC addresses of the packets
are OUI addresses that can be identified by
the system, send the packets to the voice
VLAN; otherwise, discard the packets.
Untagged packets
Normal mode
Packets with the voice VLAN tag
The packet source MAC address will not be
checked, and all packets can be transmitted in
the voice VLAN.
In the two modes, the port processes a packet with other VLAN tag in the same way, that is, forwards
the packet if the VLAN is allowed on the port, or discards the packet if the VLAN is not allowed on the
port.
It is recommended that you do not mix voice packets with other types of data in a voice VLAN. If
necessary, please ensure that the security mode is disabled.
Configuring Voice VLAN
Configuration Prerequisites
z
Create the corresponding VLAN before configuring the voice VLAN;
z
As a default VLAN, VLAN 1 does not need to be created. However, it cannot be enabled with the
voice VLAN feature.