Based on the data filtering mechanism, a voice VLAN works in either secure or normal mode.
Table 1 describes the voice VLAN working modes.
Working Mode |
Scenario |
Packet Processing |
Configuration Note |
|---|---|---|---|
Secure |
The inbound interface enabled with the voice VLAN function allows only the voice packets in which the source MAC address matches the OUI address of the voice VLAN, and discards non-voice packets from the voice VLAN and forwards packets from other VLANs. |
If the source MAC address does not match the OUI, the interface does not change the priority of voice packets and prevents the voice packets from being forwarded in the voice VLAN. If the source MAC address matches the OUI, the interface changes the priority of voice packets and allows the voice packets to be forwarded in the voice VLAN. |
The secure mode takes effect only when the voice-vlan remark-mode mac-address command is configured to increase the priority of voice packets based on MAC addresses. |
Normal |
The inbound interface enabled with the voice VLAN function transmits both voice packets and non-voice packets. In normal mode, the interface is vulnerable to attacks from malicious data traffic. |
If the source MAC address does not match the OUI, the interface does not change the priority of voice packets and allows the voice packets to be forwarded in the voice VLAN. If the source MAC address matches the OUI, the interface changes the priority of voice packets and allows the voice packets to be forwarded in the voice VLAN. |
Transmitting voice and service data at the same time in a voice VLAN is not recommended. If a voice VLAN must transmit both voice and service data, ensure that the voice VLAN works in normal mode. |
Run system-view
The system view is displayed.
Run interface interface-type interface-number
The interface view is displayed.
Run undo voice-vlan security enable
The voice VLAN is configured to work in normal mode.
By default, a voice VLAN works in normal mode.