3-4Table 3-3 Required configurations on ports of different links types in order for the ports to supporttagged voice trafficPort link typeVoice VLANassignmentmodeSupport foruntagged voicetrafficConfiguration requirementsAutomatic No —AccessManual Yes Configure the default VLAN of the port asthe voice VLAN.Automatic No —TrunkManual YesConfigure the default VLAN of the port asthe voice VLAN and assign the port to thevoice VLAN.Automatic No —HybridManual YesConfigure the default VLAN of the port asthe voice VLAN and configure the port topermit packets of the voice VLAN to passthrough untagged.z If an IP phone sends tagged voice traffic and its connecting port is configured with 802.1Xauthentication and guest VLAN, you should assign different VLAN IDs for the voice VLAN, thedefault VLAN of the connecting port, and the 802.1X guest VLAN.z If an IP phone sends untagged voice traffic, to realize the voice VLAN feature, you must configurethe default VLAN of the connecting port as the voice VLAN. In this case 802.1X authenticationfunction cannot be realized.z The default VLANs for all ports are VLAN 1. You can configure the default VLAN of a port andconfigure a port to permit a certain VLAN to pass through with commands. For more information,refer to Port-Based VLAN Configuration.z Use the display interface command to display the default VLAN of a port and the VLANspermitted to pass through the port.Security Mode and Normal Mode of Voice VLANsVoice VLAN-enabled ports can operate in security mode or normal mode based on their inbound packetfiltering mechanisms.In a safe network, you can configure the voice VLANs to operate in normal mode, thus reducing theconsumption of system resources due to source MAC addresses checking. It is recommended not totransmit both voice packets and non-voice packets in a voice VLAN. If you have to, please ensure thatthe voice VLAN security mode is disabled.
