8-4Table 8-3 How a voice VLAN-enable port processes packets in security/normal modeVoice VLANworking mode Packet type Packet processing modeUntagged packetsPackets carrying thevoice VLAN tagIf the source MAC address of a packet matches an OUIaddress configured for the device, it is forwarded in thevoice VLAN; otherwise, it is dropped.Security modePackets carryingother tagsForwarded or dropped depending on whether the portallows packets of these VLANs to pass throughUntagged packetsPackets carrying thevoice VLAN tagThe port does not check the source MAC addresses ofinbound packets. All types of packets can betransmitted in the voice VLAN.Normal modePackets carryingother tagsForwarded or dropped depending on whether the portallows packets of these VLANs to pass throughConfiguring a Voice VLANConfiguration PrerequisitesBefore configuring a VLAN as a voice VLAN, create the VLAN first. Note that you cannot configureVLAN 1 (the system-default VLAN) as a voice VLAN.Setting a Port to Operate in Automatic Voice VLAN Assignment ModeFollow these steps to set a port to operate in automatic voice VLAN assignment mode:To do... Use the command... RemarksEnter system view system-view —Set the voice VLAN aging time voice vlan aging minutesOptional1440 minutes by default.The voice VLAN aging timeconfiguration is only applicableon ports in automatic voiceVLAN assignment mode.Enable the voice VLANsecurity mode voice vlan security enable OptionalEnabled by default.Add a recognizable OUIaddressvoice vlan mac-address ouimask oui-mask [ descriptiontext ]OptionalBy default, each voice VLANhas default OUI addressesconfigured. Refer to Table 8-1for the default OUI addressesof different vendors.Enter Ethernet interface view interface interface-typeinterface-number —