Description | This article provides an example of how to enable Voice VLAN on FortiSwitch which is managed by FortiGate. |
Scope | FortiGate. |
Solution |
The IP Phones require an IP address from the Voice VLAN block, and this requirement applies to the scenario where there is a computer and an IP phone connected to the same port, at the FortiSwitch. The Data VLAN is configured as the native VLAN and the Voice VLAN is configured as the Allowed VLAN on the switch port. It is necessary to apply the following setting at the VLAN interface to detect the IP phone and retrieve the IP address from the Voice VLAN.
config switch-controller lldp-profile edit "Phone" set med-tlvs inventory-management network-policy location-identification set auto-isl disable config med-network-policy edit "voice" set status enable set vlan-intf "VOICE-VLAN" set assign-vlan enable set dscp 46 next edit "voice-signaling" set status enable set vlan-intf "VOICE-VLAN" set assign-vlan enable next end
Then, apply this LLDP profile on the FortiSwitch port and the IP phones can get the IP from the Voice VLAN.
It will be necessary to assign this LLDP profile to the port on the switch where the phone will connect. In this example, 'DATA-VLAN' is the native. VLAN and VOICE-VLAN are the IP phones' VLANs. LLDP is enabled. By default, for sending and receiving, make sure to have LLDP enabled on the IP phone.
config ports
Related document: |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.