3-5Table 3-4 How a voice VLAN-enable port processes packets in security/normal modeVoice VLANworking mode Packet type Packet processing modeUntagged packetsPackets carrying thevoice VLAN tagIf the source MAC address of a packet matches an OUIaddress configured for the device, it is forwarded in thevoice VLAN; otherwise, it is dropped.Security modePackets carryingother tagsForwarded or dropped depending on whether the portallows packets of these VLANs to pass throughUntagged packetsPackets carrying thevoice VLAN tagThe port does not check the source MAC addresses ofinbound packets. All types of packets can be transmittedin the voice VLAN.Normal modePackets carryingother tagsForwarded or dropped depending on whether the portallows packets of these VLANs to pass throughConfiguring a Voice VLANConfiguration Prerequisites1) Create a VLANBefore configuring a VLAN as a voice VLAN, create the VLAN first.2) Configure the voice VLAN assignment mode. For details, see Setting a Port to Operate inAutomatic Voice VLAN Assignment Mode and Setting a Port to Operate in Manual Voice VLANAssignment Mode.z A port can belong to only one voice VLAN at a time.z Voice VLAN cannot be enabled on a port with Link Aggregation Control Protocol (LACP) enabled.Setting a Port to Operate in Automatic Voice VLAN Assignment ModeFollow these steps to set a port to operate in automatic voice VLAN assignment mode:To do... Use the command... RemarksEnter system view system-view —Set the voice VLANaging time voice vlan aging minutesOptional1440 minutes by default.The voice VLAN aging time configuration isonly applicable on ports in automatic voiceVLAN assignment mode.Enable the voiceVLAN security modevoice vlan securityenableOptionalEnabled by default.
