FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
anignan
Staff
Staff
Article Id 245678

Description

 

This article describes how to manage FortiSwitch LLDP voice VLAN auto-tagging.

 

Scope

 

FortiGate v7.

 

Solution

 

- Make sure to have the voice VLAN already created by executing the following command:


# config system interface
    edit "VOICE-VLAN"
        set vdom "root"
        set ip 192.168.88.1 255.255.255.0
        set interface "fortilink"
        set vlanid 88
    next
end


It will be necessary to create an LLDP profile by default all ports use:


"default-auto-isl" LLDP profile
# config switch-controller lldp-profile
    edit “Phones”
    config med-network-policy
        edit “voice”
        set status enable
        set vlan-intf “VOICE-VLAN”
    next
end


It will be necessary to assign this LLDP profile to the port on the switch where the phone will connect. In this example, 'DATA-VLAN' is the native.

VLAN and VOICE-VLAN are the IP phones' VLANs. LLDP is enabled.
By default, for sending and receiving, make sure to have LLDP enabled on the IP phone.


# config switch-controller managed-switch
    edit <SWITCH SERIAL NUMBER>

        config ports
            edit "port#"
                set vlan "DATA-VLAN"
                set allowed-vlans "VOICE-VLAN"
                set lldp-profile " Phones "
                set lldp-status tx-rx
            next
         end

 

Anthony_E_0-1676351992206.png

 


This is LLDP advertising the VLAN ID.