Voice VLANs are VLANs configured specially
for voice traffic. By adding the ports with voice devices attached to voice
VLANs, you can perform QoS-related configuration for voice data, ensuring the transmission
priority of voice traffic and voice quality.
S5600 series Ethernet switches determine
whether a received packet is a voice packet by checking its source MAC address.
If the source MAC addresses of packets comply with the organizationally unique
identifier (OUI) addresses configured by the system, the packets are determined
as voice packets and transmitted in voice VLAN.
You can configure an OUI address for voice
packets or specify to use the default OUI address.
An OUI address is a
globally unique identifier assigned to a vendor by IEEE. You can determine
which vendor a device belongs to according to the OUI address which forms the
first 24 bits of a MAC address.
The following table shows the five default
OUI addresses of a switch.
Table 1-1 Default
OUI addresses preset by the switch
|
Number
|
OUI Address
|
Vendor
|
|
1
|
0003-6b00-0000
|
Cisco phone
|
|
2
|
000f-e200-0000
|
H3C Aolynk phone
|
|
3
|
00d0-1e00-0000
|
Pingtel phone
|
|
4
|
00e0-7500-0000
|
Polycom phone
|
|
5
|
00e0-bb00-0000
|
3Com phone
|
A voice VLAN can operate in two modes:
automatic and manual. You can configure the operation mode for the voice VLAN
according to data traffic passing through a port.
I. Processing mode of untagged
packets sent by IP voice devices
l
Automatic mode: an S5600 Ethernet switch
automatically adds a port connecting an IP voice device to the voice VLAN by learning
the source MAC address in the untagged packet sent by the IP voice device when
it is powered on. When the aging time of a port expires, voice ports on which
the OUI addresses are not updated (no voice traffic passes) will be
automatically removed from the voice VLAN; voice ports can not be added into or
removed from the voice VLAN through manual configurations.
l
Manual mode: add a voice port to the voice VLAN
or remove a voice port from the voice VLAN through manual configuration.
II. Processing mode of tagged
packets sent by IP voice devices
For the tagged packets sent by IP voice
devices, they are processed in the same way in either of the above two modes: forwarded
within corresponding VLAN according to their VLAN ID in the tags.
l
An untagged packet refers to the packet without the
VLAN tag.
l
A tagged packet refers to the packet with the VLAN
tag.
Voice VLAN packets can be forwarded by both
trunk and hybrid ports in voice VLAN. You can enable a trunk or hybrid port
belonging to other VLANs to forward voice and service packets simultaneously by
enabling the voice VLAN.
As multiple types of IP voice devices
exist, you need to match port mode with types of voice traffic sent by IP voice
devices, as listed in Table 1-2.
Table 1-2 Matching relationship between
port modes and voice traffic types
|
Port voice VLAN mode
|
Voice traffic type
|
Port type
|
Supported or not
|
|
Automatic
mode
|
Tagged voice
traffic
|
Access
|
Not supported
|
|
Trunk
|
Supported
Make sure the default VLAN of the port
exists and is not a voice VLAN. And the access port permits the traffic of
the default VLAN.
|
|
Hybrid
|
Supported
Make sure the default VLAN of the port
exists and is not a voice VLAN. The default VLAN must be in the list of the
tagged VLANs whose traffic is permitted by the access port.
|
|
Untagged voice
traffic
|
Access
|
Not supported, because the default VLAN
of the port must be a voice VLAN and the access port is in the voice VLAN. This
can be done by adding the port to the voice VLAN manually.
|
|
Trunk
|
|
Hybrid
|
|
Manual
mode
|
Tag voice
traffic
|
Access
|
Not supported
|
|
Trunk
|
Supported
Make sure the default VLAN of the port
exists and is not a voice VLAN. And the access port permits the traffic of
the default VLAN.
|
|
Hybrid
|
Supported
Make sure the default VLAN of the port
exists and is in the list of the tagged VLANs whose traffic is permitted by
the access port.
|
|
Untag voice
traffic
|
Access
|
Supported
Make sure the default VLAN of the port is
a voice VLAN.
|
|
Trunk
|
Supported
Make sure the default VLAN of the port is
a voice VLAN and the port permits the traffic of the VLAN.
|
|
Hybrid
|
Supported
Make sure the default VLAN of the port is
a voice VLAN and is in the list of untagged VLANs whose traffic is permitted
by the port.
|
Caution:
l
If the voice traffic transmitted by an IP voice
device is with VLAN tag, and the port which the IP voice device is attached to
is enabled with 802.1x authentication and 802.1x guest VLAN, assign different
VLAN IDs for the voice VLAN, the default VLAN of the port, and the 802.1x guest
VLAN to ensure the effective operation of these functions.
l
If the voice traffic transmitted by the IP voice
device is without VLAN tag, the default VLAN of the port which the IP voice
device is attached to can only be configured to a voice VLAN to ensure the effective
operation of the voice VLAN function. In this case, the 802.1x authentication
is unavailable.
l
Create the corresponding VLAN before configuring
a voice VLAN.
l
VLAN 1 is the default VLAN and do not need to be
created. And VLAN 1 does not support voice VLAN .
Table 1-3 Configure a voice VLAN to operate in automatic mode
|
Operation
|
Command
|
Description
|
|
Enter system view
|
system-view
|
—
|
|
Enter Ethernet port view
|
interface interface-type interface-number
|
Required
|
|
Enable the voice VLAN function on a port
|
voice vlan enable
|
Required
By default, voice VLAN is disabled.
|
|
Set the voice VLAN operation mode on a
port to automatic.
|
voice vlan mode auto
|
Optional
The default voice VLAN operation mode on
a port is automatic.
|
|
Quit to system view
|
quit
|
—
|
|
Set an OUI address that can be identified
by the voice VLAN
|
voice vlan mac-address oui mask oui-mask [ description text ]
|
Optional
By default, the switch determines the voice
traffic according to the default OUI address.
|
|
Enable the voice VLAN security mode
|
voice vlan security enable
|
Optional
By default, the voice VLAN security mode
is enabled.
|
|
Set the aging time for the voice VLAN
|
voice vlan aging minutes
|
Optional
The default aging time is 1,440 minutes.
|
|
Enable the voice VLAN function globally
|
voice vlan vlan-id enable
|
Required
|
Caution:
l
For a voice VLAN operates in automatic mode, it
does not support the adding of an Access port, and thus a voice VLAN cannot
function when configuring with the VLAN VPN function.
l
For a voice VLAN operates in automatic mode, it
only supports that the Hybrid port to process the tagged voice traffic.
However, the protocol VLAN feature requires the Hybrid port to remove tags from
the packets, see the VLAN part of this manual for details. Therefore, a VLAN
cannot be configured as a voice VLAN and a protocol VLAN simultaneously.
l
For a port operates in automatic mode, a default
VLAN cannot be configured as a voice VLAN, otherwise the system prompts you for
unsuccessful configuration.
When the voice VLAN
is working normally, if the device restarts or the Unit ID of a device in a
stack changes, in order to make the established voice connections work
normally, the system does not need to be triggered by the voice traffic to add
the port in automatic mode to the local devices as well as the IRF of the voice
VLAN but does so immediately after the restart or the changes.
Table 1-4 Configure a voice VLAN to
operate in manual mode
|
Operation
|
Command
|
Description
|
|
Enter system view
|
system-view
|
—
|
|
Enter port view
|
interface interface-type interface-number
|
Required
|
|
Enable
voice VLAN on a port
|
voice
vlan enable
|
Required
By
default, voice VLAN is disabled on a port.
|
|
Set voice
VLAN operation mode on a port to manual
|
undo voice
vlan mode auto
|
Required
The
default voice VLAN operation mode on a port is automatic.
|
|
Quit to system view
|
quit
|
—
|
|
Add a port
in manual mode to the voice VLAN
|
Access
port
|
Enter VLAN
view
|
vlan vlan-id
|
Required
|
|
Add the
port to the VLAN
|
port interface-list
|
|
Trunk or
Hybrid port
|
Enter port
view
|
interface interface-type interface-num
|
|
Add the port to the VLAN
|
port trunk permit vlan vlan-id
port hybrid vlan vlan-id { tagged | untagged }
|
|
Configure the voice VLAN to be the
default VLAN of the port
|
port trunk pvid vlan vlan-id
port hybrid pvid vlan vlan-id
|
Optional
Refer to Table
1-2 to determine whether or not this operation is needed.
|
|
Quit to system view
|
quit
|
—
|
|
Set an OUI address that can be identified
by the voice VLAN
|
voice vlan mac-address oui mask oui-mask [ description text ]
|
Optional
Without this address, the default OUI
address is used.
|
|
Enable the voice VLAN security mode
|
voice vlan security enable
|
Optional
By default, the voice VLAN security mode
is enabled.
|
|
Set the aging time for a voice VLAN
|
voice vlan aging minutes
|
Optional
The default aging time is 1,440 minutes.
|
|
Enable the voice VLAN function globally
|
voice vlan vlan-id enable
|
Required
|
Caution:
l
The voice VLAN function can be enabled for only
one VLAN at one time.
l
If the Link Aggregation Control Protocol (LACP)
is enabled on a port, voice VLAN feature cannot be enabled on it.
l
Voice VLAN function can be enabled only for the
static VLAN. A dynamic VLAN cannot be configured as a voice VLAN.
l
When ACL number applied to a port reaches to its
threshold, voice VLAN cannot be enabled on this port. You can use the display
voice vlan error-info command to locate such ports.
l
When a voice VLAN operates in security mode, the
device in it permits only the packets whose source addresses are the identified
voice OUI addresses. Packets whose source addresses cannot be identified,
including certain authentication packets (such as 802.1x authentication
packets), will be dropped. Therefore, you are suggested not to transmit both
voice data and service data in a voice VLAN. If you have to do so, make sure that
the voice VLAN does not operate in security mode.
To add a Trunk port
or a Hybrid port to the voice VLAN, refer to the Port Basic Configurations part
of the H3C S5600 Series Ethernet Switches Command Manual for the related
command.
After the above
configurations, you can execute the display command in any view to view
the running status and verify the configuration effect.
Table 1-5 Display
configurations of a Voice VLAN
|
Operation
|
Command
|
Description
|
|
Display the information about ports on
which voice VLAN configuration fails
|
display voice vlan error-info
|
You can execute the display
command in any view.
|
|
Display the voice VLAN configuration
status
|
display voice vlan status
|
|
Display the currently valid OUI addresses
|
display voice vlan oui
|
|
Display the ports operating in the
current voice VLAN
|
display vlan vlan-id
|
I. Network requirements
l
Create VLAN 2 and configure it as a voice VLAN.
l
Configure port GigabitEthernet1/0/1 as a Trunk
port, with VLAN 6 as the default VLAN and permits the traffic of the default
VLAN.
l
GigabitEthernet1/0/1 can be added to/removed
from the voice VLAN automatically according to the data stream that reaches the
port.
II. Configuration procedure
# Create VLAN 2.
<H3C> system-view
[H3C] vlan 2
# Configure GigabitEthernet1/0/1 port to be
a Trunk port, with VLAN 6 as the default VLAN and permits the traffic of the
default VLAN.
[H3C] interface GigabitEthernet 1/0/1
[H3C-GigabitEthernet1/0/1] port
link-type trunk
[H3C-GigabitEthernet1/0/1] port trunk
pvid vlan 6
[H3C-GigabitEthernet1/0/1] port trunk
permit vlan 6
# Enable the voice VLAN function on the
port and configure its voice VLAN operation mode to automatic.
[H3C-GigabitEthernet1/0/1] voice vlan
enable
[H3C-GigabitEthernet1/0/1] voice vlan
mode auto
# Enable the voice VLAN function globally.
[H3C-GigabitEthernet1/0/1] quit
[H3C] voice vlan 2 enable
I. Network requirements
l
Create VLAN 3 and configure it as a voice VLAN.
l
Configure GigabitEthernet1/0/1 port as a Trunk
port for it to be added to/removed from the voice VLAN manually.
l
Configure the OUI address to be 0011-2200-0000,
with the description string being “test”.
II. Configuration procedure
# Create
VLAN 3.
<H3C> system-view
[H3C] vlan 3
[H3C-vlan3] quit
# Configure GigabitEthernet1/0/3 port to be
a Trunk port and add it to VLAN 3.
[H3C] interface GigabitEthernet 1/0/3
[H3C-GigabitEthernet1/0/3] port
link-type trunk
[H3C-GigabitEthernet1/0/3] port trunk
permit vlan 3
# Enable the voice VLAN function on the
port and configure its voice VLAN operation mode to manual.
[H3C-GigabitEthernet1/0/3] voice vlan
enable
[H3C-GigabitEthernet1/0/3] undo voice
vlan mode auto
[H3C-GigabitEthernet1/0/3] quit
# Specify an OUI address.
[H3C] voice vlan mac-address
0011-2200-0000 mask ffff-ff00-0000 description test
# Enable the voice VLAN function globally.
[H3C] voice vlan 3 enable
# Display voice VLAN-related
configurations.
[H3C] display voice vlan status
Voice Vlan status: ENABLE
Voice Vlan ID: 3
Voice Vlan security mode: Security
Voice Vlan aging time: 1440 minutes
Current voice vlan enabled port mode:
PORT MODE
----------------------------------------
GigabitEthernet1/0/3 MANUAL
# Remove GigabitEthernet1/0/3 port from the
voice VLAN.
[H3C] interface GigabitEthernet 1/0/3
[H3C-GigabitEthernet1/0/3] undo port trunk
permit vlan 3
