TP-Link TL-SG3216 manual Tag, ¾ Security Mode of Voice Vlan

A voice VLAN can operate in two modes: automatic mode and manual mode.

Automatic Mode: In this mode, the switch automatically add a port which receives voice packets to voice VLAN and determine the priority of the packets through learning the source MAC of the UNTAG packets sent from IP phone when it is powered on. The aging time of voice VLAN can be configured on the switch. If the switch does not receive any voice packet on the ingress port within the aging time, the switch will remove this port from voice VLAN. Voice ports are automatically added into or removed from voice VLAN.

Manual Mode: You need to manually add the port of IP phone to voice VLAN, and then the switch will assign ACL rules and configure the priority of the packets through learning the source MAC address of packets and matching OUI address.

In practice, the port voice VLAN mode is configured according to the type of packets sent out from voice device and the link type of the port. The following table shows the detailed information.

Port Voice VLAN	Voice			Link type of the port and processing mode
Mode	Stream Type
Automatic Mode	TAG	voice		ACCESS: Not supported.
	stream
				TRUNK: Supported. The default VLAN of the port can not be
				voice VLAN.
				GENERAL: Supported. The default VLAN of the port can not
				be voice VLAN and the egress rule of the access port in the
				default VLAN should be TAG.
	UNTAG voice		ACCESS、TRUNK、GENERAL: Not supported.
	stream
Manual Mode	TAG	voice		ACCESS: Not supported.
	stream
				TRUNK：Supported. The default VLAN of the port should be
				voice VLAN.
				GENERAL：Supported. The default VLAN of the port can noe
				be voice VLAN and the egress rule of the access port in the
				default VLAN should be TAG.
	UNTAG voice			ACCESS: Supported. The default VLAN of the port should be
	stream			voice VLAN.
				TRUNK: Supported. The default VLAN of the port should be
				voice VLAN and the access port permits the packets of the
				voice VLAN.
				GENERAL: Supported. The default VLAN of the port can noe
				be voice VLAN and the egress rule of the access port in the
				default VLAN should be UNTAG.

Table 9-2 Port voice VLAN mode and voice stream processing mode

¾Security Mode of Voice VLAN

When voice VLAN is enabled for a port, you can configure its security mode to filter data stream. If security mode is enabled, the port just forwards voice packets, and discards other packets whose source MAC addresses do not match OUI addresses. If security mode is not enabled, the port forwards all the packets.

117