Technical Tip: Changing VLANs on switch ports with IP Phones

Description

This article describes changing VLANs on switch ports with IP Phones.

The device type 'IP Phone' is designated for IP Phones that use a tagged Voice VLAN to communicate. Ports with IP Phones will remain up when provisioning the data (untagged) VLAN for an endpoint connecting behind the phone. This is done to ensure the IP Phone itself does not lose network connectivity.

For complete instructions, see IP Phone Integration in the Fortinet Document Library.

Solution

Since FortiNAC will ignore a host that has the default IP Phone device type when determining VLAN ID, create a new/custom Device Type for IP Phones and set it to IP Phones via the Device Profiling Rule.