Title | Size | Downloads |
---|---|---|
H3C S3600 Series Ethernet Switches Operation Manual-Release 1702(V1.01)-Voice VLAN Operation.pdf | 242.45 KB |
- Table of Contents
- Related Documents
-
Title | Size | Download |
---|---|---|
06-Voice VLAN Operation | 242.45 KB |
Table of Contents
How S3600 Series Switches Identify Voice Traffic
Setting the Voice Traffic Transmission Priority
Configuring Voice VLAN Assignment Mode of a Port
Support for Voice VLAN on Various Ports
Configuring QoS Priority Settings for Voice Traffic on an Interface
Configuring the Voice VLAN to Operate in Automatic Voice VLAN Assignment Mode
Configuring the Voice VLAN to Operate in Manual Voice VLAN Assignment Mode
Displaying and Maintaining Voice VLAN
Voice VLAN Configuration Example
Voice VLAN Configuration Example (Automatic Voice VLAN Assignment Mode)
Voice VLAN Configuration Example (Manual Voice VLAN Assignment Mode)
The Configuring QoS Priority Settings for Voice Traffic on an Interface is added. For the detailed configuration, refer to Configuring QoS Priority Settings for Voice Traffic on an Interface .
When configuring voice VLAN, go to these sections for information you are interested in:
l Displaying and Maintaining Voice VLAN
l Voice VLAN Configuration Example
Voice VLAN Overview
Voice VLANs are VLANs configured specially for voice traffic. By adding the ports connected with voice devices to voice VLANs, you can have voice traffic transmitted within voice VLANs and perform QoS-related configuration for voice traffic as required, thus ensuring the transmission priority of voice traffic and voice quality.
How an IP Phone Works
IP phones can convert analog voice signals into digital signals to enable them to be transmitted in IP-based networks. Used in conjunction with other voice devices, IP phones can offer large-capacity and low-cost voice communication solutions. As network devices, IP phones need IP addresses to operate properly in a network. An IP phone can acquire an IP address automatically or through manual configuration. The following part describes how an IP phone acquires an IP address automatically.
The following part only describes the common way for an IP phone to acquire an IP address. The detailed process may vary by manufacture. Refer to the corresponding user manual for the detailed information.
When an IP phone applies for an IP address from a DHCP server, the IP phone can also apply for the following extensive information from the DHCP server through the Option184 field:
l IP address of the network call processor (NCP)
l IP address of the secondary NCP server
l Voice VLAN configuration
l Failover call routing
Refer to DHCP Operation for information about the Option184 field.
Following describes the way an IP phone acquires an IP address.
Figure 1-1 Network diagram for IP phones
As shown in Figure 1-1, the IP phone needs to work in conjunction with the DHCP server and the NCP to establish a path for voice data transmission. An IP phone goes through the following three phases to become capable of transmitting voice data.
2) After the IP phone is powered on, it sends an untagged DHCP request message containing four special requests in the Option 184 field besides the request for an IP address. The message is broadcast in the default VLAN of the receiving port. After receiving the DHCP request message, DHCP Server 1, which resides in the default VLAN of the port receiving the message, responds as follows:
l If DHCP Server 1 does not support Option 184, it returns the IP address assigned to the IP phone but ignores the other four special requests in the Option 184 field. Without information about voice VLAN, the IP phone can only send untagged packets in the default VLAN of the port the IP phone is connected to. In this case, you need to manually configure the default VLAN of the port as a voice VLAN.
In cases where an IP phone obtains an IP address from a DHCP server that does not support Option 184, the IP phone directly communicates through the gateway after it obtains an IP address. It does not go through the steps described below.
l If DHCP Server 1 supports Option 184, it returns the IP address assigned to the IP phone, the IP address of the NCP, the voice VLAN ID, and so on.
3) On acquiring the voice VLAN ID and NCP address from DHCP Server 1, the IP phone communicates with the specified NCP to download software, ignores the IP address assigned by DHCP Server 1, and sends a new DHCP request message carrying the voice VLAN tag to the voice VLAN.
4) After receiving the DHCP request, DHCP Server 2 residing in the voice VLAN assigns a new IP address to the IP phone and sends a tagged response message to the IP phone. After the IP phone receives the tagged response message, it sends voice data packets tagged with the voice VLAN tag to communicate with the voice gateway. In this case, the port connecting to the IP phone must be configured to allow the packets tagged with the voice VLAN tag to pass.
l An untagged packet carries no VLAN tag.
l A tagged packet carries the tag of a VLAN.
To set an IP address and a voice VLAN for an IP phone manually, just make sure that the voice VLAN ID to be set is consistent with that of the switch and the NCP is reachable to the IP address to be set.
How S3600 Series Switches Identify Voice Traffic
S3600 series Ethernet switches determine whether a received packet is a voice packet by checking its source MAC address against an organizationally unique identifier (OUI) list. If a match is found, the packet is considered as a voice packet. Ports receiving packets of this type will be added to the voice VLAN automatically for transmitting voice data.
You can configure OUI addresses for voice packets or specify to use the default OUI addresses.
An OUI address is a globally unique identifier assigned to a vendor by IEEE. You can determine which vendor a device belongs to according to the OUI address which forms the first 24 bits of a MAC address. S3600 series Ethernet switches support OUI address mask configuration. You can adjust the matching depth of MAC address by setting different OUI address masks.
The following table lists the five default OUI addresses on S3600 series switches.
Table 1-1 Default OUI addresses pre-defined on the switch
Number |
OUI address |
Vendor |
1 |
0003-6b00-0000 |
Cisco phones |
2 |
000f-e200-0000 |
H3C Aolynk phones |
3 |
00d0-1e00-0000 |
Pingtel phones |
4 |
00e0-7500-0000 |
Polycom phones |
5 |
00e0-bb00-0000 |
3Com phones |
Setting the Voice Traffic Transmission Priority
In order to improve transmission quality of voice traffic, the switch by default re-marks the priority of the traffic in the voice VLAN as follows:
l Set the CoS (802.1p) priority to 6.
l Set the DSCP value to 46.
Configuring Voice VLAN Assignment Mode of a Port
A port can work in automatic voice VLAN assignment mode or manual voice VLAN assignment mode. You can configure the voice VLAN assignment mode for a port according to data traffic passing through the port.
Processing mode of untagged packets sent by IP voice devices
l Automatic voice VLAN assignment mode. An S3600 Ethernet switch automatically adds a port connecting an IP voice device to the voice VLAN by learning the source MAC address in the untagged packet sent by the IP voice device when it is powered on. The voice VLAN uses the aging mechanism to maintain the number of ports in the voice VLAN. When the aging timer expires, the ports whose OUI addresses are not updated (that is, no voice traffic passes) will be removed from the voice VLAN. In voice VLAN assignment automatic mode, ports can not be added to or removed from a voice VLAN manually.
l Manual voice VLAN assignment mode: In this mode, you need to add a port to a voice VLAN or remove a port from a voice VLAN manually.
Processing mode of tagged packets sent by IP voice devices
Tagged packets from IP voice devices are forwarded based on their tagged VLAN IDs, whether the automatic or manual voice VLAN assignment mode is used.
If the voice traffic transmitted by an IP voice device carries VLAN tags, and 802.1x authentication and guest VLAN is enabled on the port which the IP voice device is connected to, assign different VLAN IDs for the voice VLAN, the default VLAN of the port, and the 802.1x guest VLAN to ensure the effective operation of these functions.
Support for Voice VLAN on Various Ports
Voice VLAN packets can be forwarded by access ports, trunk ports, and hybrid ports. You can enable a trunk or hybrid port belonging to other VLANs to forward voice and service packets simultaneously by enabling the voice VLAN.
For different types of IP phones, the support for voice VLAN varies with port types and port configuration. For IP phones capable of acquiring IP address and voice VLAN automatically, the support for voice VLAN is described in Table 1-2.
Table 1-2 Matching relationship between port types and voice devices capable of acquiring IP address and voice VLAN automatically
Voice VLAN assignment mode |
Voice traffic type |
Port type |
Supported or not |
Automatic |
Tagged voice traffic |
Access |
Not supported |
Trunk |
Supported Make sure the default VLAN of the port exists and is not a voice VLAN, and the access port permits the traffic of the default VLAN. |
||
Hybrid |
Supported Make sure the default VLAN of the port exists and is not a voice VLAN, and the default VLAN is in the list of the tagged VLANs whose traffic is permitted by the access port. |
||
Untagged voice traffic |
Access |
Not supported, because the default VLAN of the port must be a voice VLAN and the access port is in the voice VLAN. This can be done by adding the port to the voice VLAN manually. |
|
Trunk |
|||
Hybrid |
|||
Manual |
Tagged voice traffic |
Access |
Not supported |
Trunk |
Supported Make sure the default VLAN of the port exists and is not a voice VLAN, and the access port permits the traffic of the default VLAN and the voice VLAN. |
||
Hybrid |
Supported Make sure the default VLAN of the port exists and is not a voice VLAN, and the default VLAN and the voice VLAN is in the list of the tagged VLANs whose traffic is permitted by the access port. |
||
Untagged voice traffic |
Access |
Supported Make sure the default VLAN of the port is a voice VLAN. |
|
Trunk |
Supported Make sure the default VLAN of the port is a voice VLAN and the port permits the traffic of the VLAN. |
||
Hybrid |
Supported Make sure the default VLAN of the port is a voice VLAN and is in the list of untagged VLANs whose traffic is permitted by the port. |
IP phones acquiring IP address and voice VLAN through manual configuration can forward only tagged traffic, so the matching relationship is relatively simple, as shown in Table 1-3:
Voice VLAN assignment mode |
Port type |
Supported or not |
Automatic |
Access |
Not supported |
Trunk |
Supported Make sure the default VLAN of the port exists and is not a voice VLAN, and the access port permits the traffic of the default VLAN. |
|
Hybrid |
Supported Make sure the default VLAN of the port exists and is not a voice VLAN, and the default VLAN is in the list of the tagged VLANs whose traffic is permitted by the access port. |
|
Manual |
Access |
Not supported |
Trunk |
Supported Make sure the default VLAN of the port exists and is not a voice VLAN, and the access port permits the traffic of the default VLAN. |
|
Hybrid |
Supported Make sure the default VLAN of the port exists and is not a voice VLAN, and the default VLAN and the voice VLAN is in the list of the tagged VLANs whose traffic is permitted by the access port. |
Security Mode of Voice VLAN
On S3600 series Ethernet switches, a voice VLAN can operate in the security mode. Voice VLANs operating in this mode only permit voice data, enabling you to perform voice traffic-specific priority configuration. With the security mode disabled, both voice data and service data can be transmitted in a voice VLAN.
Voice VLAN Configuration
Configuration Prerequisites
l Create the corresponding VLAN before configuring a voice VLAN.
l VLAN 1 (the default VLAN) cannot be configured as a voice VLAN.
Configuring QoS Priority Settings for Voice Traffic on an Interface
In voice VLAN applications, you can improve the quality of voice traffic by configuring the appropriate QoS priority settings, including the Class of Service (CoS) and Differentiated Services Code Point (DSCP) values, for voice traffic. Voice traffic carries its own QoS priority settings. You can configure the device either to modify or not to modify the QoS priority settings carried by incoming voice traffic.
Follow these steps to configure QoS priority settings for voice traffic:
To do... |
Use the command... |
Remarks |
Enter system view |
system-view |
— |
Enter interface view |
interface interface-type interface-number |
— |
Configure the interface to trust the QoS priority settings in incoming voice traffic, that is, not to modify the CoS and DSCP values marked for incoming traffic of the voice VLAN |
voice vlan qos trust |
Required Use either command By default, an interface modifies the CoS value and the DSCP value marked for voice VLAN traffic into 6 and 46 respectively. The voice vlan qos command and the voice vlan qos trust command can overwrite each other, whichever is configured last. |
Configure the interface to modify the CoS and DSCP values marked for incoming traffic of the voice VLAN into specified values |
voice vlan qos cos-value dscp-value |
Configure the QoS priority settings for voice traffic on an interface before enabling voice VLAN on the interface. If the configuration order is reversed, your priority trust setting will fail.
Configuring the Voice VLAN to Operate in Automatic Voice VLAN Assignment Mode
Follow these steps to configure a voice VLAN to operate in automatic voice VLAN assignment mode:
To do… |
Use the command… |
Remarks |
Enter system view |
system-view |
— |
Set an OUI address that can be identified by the voice VLAN |
voice vlan mac-address oui mask oui-mask [ description text ] |
Optional By default, the switch determines the voice traffic according to the default OUI address. |
Enable the voice VLAN security mode |
voice vlan security enable |
Optional By default, the voice VLAN security mode is enabled. |
Set the voice VLAN aging timer |
voice vlan aging minutes |
Optional The default aging timer is 1440 minutes. |
Enable the voice VLAN function globally |
voice vlan vlan-id enable |
Required |
Enter Ethernet port view |
interface interface-type interface-number |
Required |
Enable the voice VLAN function on a port |
voice vlan enable |
Required By default, voice VLAN is disabled. |
Enable the voice VLAN legacy function on the port |
voice vlan legacy |
Optional By default, voice VLAN legacy is disabled. |
Set the voice VLAN assignment mode of the port to automatic |
voice vlan mode auto |
Optional The default voice VLAN assignment mode on a port is automatic. |
l A port working in automatic voice VLAN assignment mode cannot be assigned to the voice VLAN manually. Therefore, if a VLAN is configured as the voice VLAN and a protocol-based VLAN at the same time, the protocol-based VLAN function cannot be bound with the port. For information about protocol-based VLANs, refer to VLAN Configuration in this manual.
l For a port operating in automatic voice VLAN assignment mode, its default VLAN cannot be configured as the voice VLAN; otherwise the system prompts you for unsuccessful configuration.
When the voice VLAN is working normally, if the device restarts or the Unit ID of a device in a stack changes, in order to make the established voice connections work normally, the system does not need to be triggered by the voice traffic to add the port in automatic voice VLAN assignment mode to the local devices as well as the IRF of the voice VLAN but does so immediately after the restart or the changes.
Configuring the Voice VLAN to Operate in Manual Voice VLAN Assignment Mode
Follow these steps to configure a voice VLAN to operate in manual voice VLAN assignment mode:
To do… |
Use the command… |
Remarks |
||
Enter system view |
system-view |
— |
||
Set an OUI address that can be identified by the voice VLAN |
voice vlan mac-address oui mask oui-mask [ description text ] |
Optional Without this address, the default OUI address is used. |
||
Enable the voice VLAN security mode |
voice vlan security enable |
Optional By default, the voice VLAN security mode is enabled. |
||
Set the voice VLAN aging timer |
voice vlan aging minutes |
Optional The default aging timer is 1,440 minutes. |
||
Enable the voice VLAN function globally |
voice vlan vlan-id enable |
Required |
||
Enter port view |
interface interface-type interface-number |
Required |
||
Enable voice VLAN on a port |
voice vlan enable |
Required By default, voice VLAN is disabled on a port. |
||
Enable the voice VLAN legacy function on the port |
voice vlan legacy |
Optional By default, voice VLAN legacy is disabled. |
||
Set voice VLAN assignment mode on a port to manual |
undo voice vlan mode auto |
Required The default voice VLAN assignment mode on a port is automatic. |
||
Quit to system view |
quit |
— |
||
Add a port in manual voice VLAN assignment mode to the voice VLAN |
Access port |
Enter VLAN view |
vlan vlan-id |
Required By default, all the ports belong to VLAN 1. |
Add the port to the VLAN |
port interface-list |
|||
Trunk or Hybrid port |
Enter port view |
interface interface-type interface-num |
||
Add the port to the VLAN |
port trunk permit vlan vlan-id port hybrid vlan vlan-id { tagged | untagged } |
|||
Configure the voice VLAN to be the default VLAN of the port |
port trunk pvid vlan vlan-id port hybrid pvid vlan vlan-id |
Optional Refer to Table 1-2 to determine whether or not this operation is needed. |
l The voice VLAN function can be enabled for only one VLAN at one time.
l If the Link Aggregation Control Protocol (LACP) is enabled on a port, voice VLAN feature cannot be enabled on it.
l Voice VLAN function can be enabled only for the static VLAN. A dynamic VLAN cannot be configured as a voice VLAN.
l When ACL number applied to a port reaches to its threshold, voice VLAN cannot be enabled on this port. You can use the display voice vlan error-info command to locate such ports.
l When a voice VLAN operates in security mode, the device in it permits only the packets whose source addresses are the identified voice OUI addresses. Packets whose source addresses cannot be identified, including certain authentication packets (such as 802.1x authentication packets), will be dropped. Therefore, you are suggested not to transmit both voice data and service data in a voice VLAN. If you have to do so, make sure that the voice VLAN does not operate in security mode.
l The voice VLAN legacy feature realizes the communication between H3C device and other vendor's voice device by automatically adding the voice VLAN tag to the voice data coming from other vendors’ voice device. The voice vlan legacy command can be executed before voice VLAN is enabled globally and on a port, but it takes effect only after voice VLAN is enabled globally and on the port.
To assign a trunk port or a hybrid port to the voice VLAN, refer to VLAN Configuration of this manual for the related command.
Displaying and Maintaining Voice VLAN
To do… |
Use the command… |
Remarks |
Display information about the ports on which voice VLAN configuration fails |
display voice vlan error-info |
In any view |
Display the voice VLAN configuration status |
display voice vlan status |
|
Display the OUI list |
display voice vlan oui |
|
Display the ports operating in the voice VLAN |
display vlan vlan-id |
Voice VLAN Configuration Example
Voice VLAN Configuration Example (Automatic Voice VLAN Assignment Mode)
Network requirements
Create a voice VLAN and configure it to operate in automatic voice VLAN assignment mode to enable the port to which an IP phone is connected to join or exit the voice VLAN automatically and voice traffic to be transmitted within the voice VLAN.
l Create VLAN 2 and configure it as the voice VLAN, with the aging timer being 100 minutes.
l The IP phone sends tagged packets. It is connected to Ethernet 1/0/1, a hybrid port, with VLAN 6 being its default VLAN. Set this port to operate in automatic voice VLAN assignment mode.
l You need to add a user-defined OUI address 0011-2200-000, with the mask being ffff-ff00-0000 and the description string being “test”.
Network diagram
Figure 1-2 Network diagram for voice VLAN configuration (automatic voice VLAN assignment mode)
Configuration procedure
# Create VLAN 2 and VLAN 6.
<DeviceA> system-view
[DeviceA] vlan 2
[DeviceA-vlan2] quit
[DeviceA] vlan 6
[DeviceA-vlan6] quit
# Set the voice VLAN aging timer.
[DeviceA] voice vlan aging 100
# Add a user-defined OUI address 0011-2200-000 and set the description string to “test”.
[DeviceA] voice vlan mac-address 0011-2200-0000 mask ffff-ff00-0000 description test
# Enable the voice VLAN function globally.
[DeviceA] voice vlan 2 enable
# Configure the vocie VLAN to operate in automatic voice VLAN assignment mode on Ethernet 1/0/1. This operation is optional. By default, a port operates in automatic voice VLAN assignment mode.
[DeviceA] interface Ethernet 1/0/1
[DeviceA-Ethernet1/0/1] voice vlan mode auto
# Configure Ethernet 1/0/1 as a hybrid port.
[DeviceA-Ethernet1/0/1] port link-type hybrid
# Configure VLAN 6 as the default VLAN of Ethernet 1/0/1, and configure Ethernet 1/0/1 to permit packets with the tag of VLAN 6.
[DeviceA-Ethernet1/0/1] port hybrid pvid vlan 6
[DeviceA-Ethernet1/0/1] port hybrid vlan 6 tagged
# Enable the voice VLAN function on Ethernet 1/0/1.
[DeviceA-Ethernet1/0/1] voice vlan enable
Voice VLAN Configuration Example (Manual Voice VLAN Assignment Mode)
Network requirements
Create a voice VLAN and configure it to operate in manual voice VLAN assignment mode. Add the port to which an IP phone is connected to the voice VLAN to enable voice traffic to be transmitted within the voice VLAN.
l Create VLAN 2 and configure it as a voice VLAN. Set the voice VLAN to operate in security mode
l The IP phone sends untagged packets. It is connected to Ethernet 1/0/1, a hybrid port. Set this port to operate in manual voice VLAN assignment mode.
l You need to add a user-defined OUI address 0011-2200-000, with the mask being ffff-ff00-0000 and the description string being “test”.
Network diagram
Figure 1-3 Network diagram for voice VLAN configuration (manual voice VLAN assignment mode)
Configuration procedure
# Enable the security mode for the voice VLAN so that the ports in the voice VLAN permit valid voice packets only. This operation is optional. The security mode is enabled by default.
<DeviceA> system-view
[DeviceA] voice vlan security enable
# Add a user-defined OUI address 0011-2200-000 and set the description string to “test”.
[DeviceA] voice vlan mac-address 0011-2200-0000 mask ffff-ff00-0000 description test
# Create VLAN 2 and configure it as a voice VLAN.
[DeviceA] vlan 2
[DeviceA-vlan2] quit
[DeviceA] voice vlan 2 enable
# Configure Ethernet 1/0/1 to operate in manual voice VLAN assignment mode.
[DeviceA] interface Ethernet 1/0/1
[DeviceA-Ethernet1/0/1] undo voice vlan mode auto
# Configure Ethernet 1/0/1 as a hybrid port.
[DeviceA-Ethernet1/0/1] port link-type hybrid
# Configure the voice VLAN as the default VLAN of Ethernet 1/0/1, and add the voice VLAN to the list of untagged VLANs whose traffic is permitted by the port.
[DeviceA-Ethernet1/0/1] port hybrid pvid vlan 2
[DeviceA-Ethernet1/0/1] port hybrid vlan 2 untagged
# Enable the voice VLAN function on Ethernet 1/0/1.
[DeviceA-Ethernet1/0/1] voice vlan enable
Verification
# Display the OUI addresses, the corresponding OUI address masks and the corresponding description strings that the system supports.
<DeviceA> display voice vlan oui
Oui Address Mask Description
0003-6b00-0000 ffff-ff00-0000 Cisco phone
000f-e200-0000 ffff-ff00-0000 H3C Aolynk phone
0011-2200-0000 ffff-ff00-0000 test
00d0-1e00-0000 ffff-ff00-0000 Pingtel phone
00e0-7500-0000 ffff-ff00-0000 Polycom phone
00e0-bb00-0000 ffff-ff00-0000 3Com phone
# Display the status of the current voice VLAN.
<DeviceA> display voice vlan status
Voice Vlan status: ENABLE
Voice Vlan ID: 2
Voice Vlan security mode: Security
Voice Vlan aging time: 1440 minutes
Current voice vlan enabled port mode:
PORT MODE
-------------------------------
Ethernet1/0/1 MANUAL