614 Configuring VLANsConfiguring a Voice VLANThe commands in this example create a VLAN for voice traffic with a VLANID of 25. Port 10 is set to an 802.1Q VLAN. In in this example, there aremultiple devices connected to port 10, so the port must be in general mode inorder to enable MAC-based 802.1X authentication. Next, Voice VLAN isenabled on the port with the Voice VLAN ID set to 25. Finally, Voice VLANauthentication is disabled on port 10 because the phone connected to thatport does not support 802.1X authentication. All other devices are required touse 802.1X authentication for network access. For more information about802.1X authentication, see "Configuring Port and System Security" onpage 469.To configure the switch:1 Create the voice VLAN.console#configureconsole(config)#vlan 25console(config-vlan25)#exit2 Enable the Voice VLAN feature on the switch.console(config)#voice vlan3 Configure port 10 to be in general mode.console(config)#interface te1/0/10console(config-if-Te1/0/10)#switchport modegeneral4 Enable port-based 802.1X authentication on the port. This step is requiredonly if there are multiple devices that use port-based authenticationconnected to the port.console(config-if-Te1/0/10)#dot1x port-controlmac-based5 Enable the voice VLAN feature on the interfaceconsole(config-if-Te1/0/10)#voice vlan 25NOTE: In an environment where the IP phone uses LLDP-MED to obtainconfiguration information, an additional step to enable LLDP-MED on theinterface would be required by issuing the lldp med command in InterfaceConfiguration mode.
