Description
This article describes how to manage FortiSwitch LLDP voice VLAN auto-tagging.
Scope
FortiGate v7.
Solution
- Make sure to have the voice VLAN already created by executing the following command:
# config system interface
edit "VOICE-VLAN"
set vdom "root"
set ip 192.168.88.1 255.255.255.0
set interface "fortilink"
set vlanid 88
next
end
It will be necessary to create an LLDP profile by default all ports use:
"default-auto-isl" LLDP profile
# config switch-controller lldp-profile
edit “Phones”
config med-network-policy
edit “voice”
set status enable
set vlan-intf “VOICE-VLAN”
next
end
It will be necessary to assign this LLDP profile to the port on the switch where the phone will connect. In this example, 'DATA-VLAN' is the native.
VLAN and VOICE-VLAN are the IP phones' VLANs. LLDP is enabled.
By default, for sending and receiving, make sure to have LLDP enabled on the IP phone.
# config switch-controller managed-switch
edit <SWITCH SERIAL NUMBER>
config ports
edit "port#"
set vlan "DATA-VLAN"
set allowed-vlans "VOICE-VLAN"
set lldp-profile " Phones "
set lldp-status tx-rx
next
end
This is LLDP advertising the VLAN ID.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.