Skip to main content
anignan
Staff
Staff
February 14, 2023

Technical Tip: Managed FortiSwitch LLDP voice VLAN auto tagging

  • February 14, 2023
  • 0 replies
  • 15719 views


Description

This article describes how to manage FortiSwitch LLDP voice VLAN auto-tagging.

Scope

 FortiGate v7.

Solution

Make sure to have the voice VLAN already created by executing the following command:

config system interface
    edit "VOICE-VLAN"
        set vdom "root"
        set ip 192.168.88.1 255.255.255.0
        set interface "fortilink"
        set vlanid 88
    next
end


Create a default LLDP Profile (for Phones):

It will be necessary to create an LLDP profile that all ports use by default:

config switch-controller lldp-profile
    edit “Phones”
        config med-network-policy
            edit “voice”
                set status enable
                set vlan-intf “VOICE-VLAN”
            next
        end


It will be necessary to assign this LLDP profile to the port on the switch where the phone will connect. In this example, 'DATA-VLAN' is the native VLAN and VOICE-VLAN is the IP phones' VLAN.

Make sure LLDP is enabled: By default, for sending and receiving, make sure to have LLDP enabled on the IP phone.

config switch-controller managed-switch
    edit <SWITCH SERIAL NUMBER>
        config ports
            edit "port#"
                set vlan "DATA-VLAN"
                set allowed-vlans "VOICE-VLAN"
                set lldp-profile "Phones"
                set lldp-status tx-rx
            next
         end


Upon checking the auto-tagging of the VLAN in Wireshark:

Anthony_E_0-1676351992206.png


This is LLDP advertising the VLAN ID.