FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
salemneaz
Staff
Staff
Article Id 270580
Description This article provides an example of how to enable Voice VLAN on FortiSwitch which is managed by FortiGate.
Scope FortiGate.
Solution

The IP Phones require an IP address from the Voice VLAN block, and this requirement applies to the scenario where there is a computer and an IP phone connected to the same port, at the FortiSwitch. The Data VLAN is configured as the native VLAN and the Voice VLAN is configured as the Allowed VLAN on the switch port.

It is necessary to apply the following setting at the VLAN interface to detect the IP phone and retrieve the IP address from the Voice VLAN.

 

config switch-controller lldp-profile

    edit "Phone"

        set med-tlvs inventory-management network-policy location-identification

        set auto-isl disable

            config med-network-policy

                edit "voice"

                    set status enable

                    set vlan-intf "VOICE-VLAN"

                    set assign-vlan enable

                    set dscp 46

                next

                    edit "voice-signaling"

                    set status enable

                    set vlan-intf "VOICE-VLAN"

                    set assign-vlan enable

                next

            end

 

Then, apply this LLDP profile on the FortiSwitch port and the IP phones can get the IP from the Voice VLAN.

 

It will be necessary to assign this LLDP profile to the port on the switch where the phone will connect. In this example, 'DATA-VLAN' is the native. VLAN and VOICE-VLAN are the IP phones' VLANs. LLDP is enabled. By default, for sending and receiving, make sure to have LLDP enabled on the IP phone.


config switch-controller managed-switch
    edit <SWITCH SERIAL NUMBER>

        config ports
            edit "port#"
                set vlan "DATA-VLAN"
                set allowed-vlans "VOICE-VLAN"
                set lldp-profile "Phone"
                set lldp-status tx-rx
            next
         end

 

Related document:

Configuration notes.