No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S9300, S9300E, and S9300X V200R012C00 Configuration Guide - Ethernet Switching

This document describes the configuration of Ethernet services, including configuring MAC address table, link aggregation, VLANs, VLAN aggregation, MUX VLAN, VLAN termination, Voice VLAN, VLAN mapping, QinQ, GVRP, STP/RSTP/MSTP, VBST, SEP, RRPP, ERPS, LBDT, HVRP, and Layer 2 protocol transparent transmission.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
(Optional) Configuring the Secure or Normal Mode of a Voice VLAN

(Optional) Configuring the Secure or Normal Mode of a Voice VLAN

Context

Based on the data filtering mechanism, a voice VLAN works in either secure or normal mode.

Table 9-2 describes the voice VLAN working modes.

Table 9-2  Security and normal modes

Working Mode

Scenario

Packet Processing

Configuration Note

Secure

The inbound interface enabled with the voice VLAN function allows only the voice packets in which the source MAC address matches the OUI address of the voice VLAN, and discards non-voice packets from the voice VLAN and forwards packets from other VLANs.

If the source MAC address does not match the OUI, the interface does not change the priority of voice packets and prevents the voice packets from being forwarded in the voice VLAN.

If the source MAC address matches the OUI, the interface changes the priority of voice packets and allows the voice packets to be forwarded in the voice VLAN.

The secure mode takes effect only when the voice-vlan remark-mode mac-address command is configured to increase the priority of voice packets based on MAC addresses.

Normal

The inbound interface enabled with the voice VLAN function transmits both voice packets and non-voice packets. In normal mode, the interface is vulnerable to attacks from malicious data traffic.

If the source MAC address does not match the OUI, the interface does not change the priority of voice packets and allows the voice packets to be forwarded in the voice VLAN.

If the source MAC address matches the OUI, the interface changes the priority of voice packets and allows the voice packets to be forwarded in the voice VLAN.

Transmitting voice and service data at the same time in a voice VLAN is not recommended. If a voice VLAN must transmit both voice and service data, ensure that the voice VLAN works in normal mode.

Procedure

  • Configuring the secure mode

    1. Run system-view

      The system view is displayed.

    2. Run interface interface-type interface-number

      The interface view is displayed.

    3. Run voice-vlan security enable

      The voice VLAN is configured to work in secure mode.

      By default, a voice VLAN works in normal mode.

  • Configuring the normal mode

    1. Run system-view

      The system view is displayed.

    2. Run interface interface-type interface-number

      The interface view is displayed.

    3. Run undo voice-vlan security enable

      The voice VLAN is configured to work in normal mode.

      By default, a voice VLAN works in normal mode.

Translation
Download
Updated: 2019-01-18

Document ID: EDOC1100038290

Views: 105510

Downloads: 24

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next