Comware

 View Only
  • 1.  HP / H3C S5120-EI / A5120-EI Port-Security Voice Vlan

    Posted Oct 13, 2011 02:42 PM

    Hi there,

     

    I'm trying to use port-security with voice vlan.

    I'm using a port-mode autolearn cause i want to add the mac-addresses by myself. 

     

    I can add the mac-address binded to the access vlan on a port but I can achieve the same thing using the voice vlan on the port.

     

    Here's my port configuration:

    interface GigabitEthernet1/0/3
    port access vlan 151
    undo voice vlan mode auto
    voice vlan 6 enable
    port-security max-mac-count 2
    port-security port-mode autolearn
    port-security intrusion-mode blockmac
    #

     

    Thanks !



  • 2.  RE: HP / H3C S5120-EI / A5120-EI Port-Security Voice Vlan

    Posted Dec 29, 2011 05:36 AM

    The port is configured as access  port so it will only allow vlan 151.

     

    Do you want the port to work with both vlan 151 and vlan 6 ? if yes then configure the port as hybrid with untag for data VLAN (if it is 151) and enable voice vlan mode auto (the traffic for the phone will be tagged).

     

     



  • 3.  RE: HP / H3C S5120-EI / A5120-EI Port-Security Voice Vlan

    Posted Dec 29, 2011 05:44 AM
    and if you want the traffic of the phone to be untagged and work with mac auth then use access port as configured but the PVID of the port must be the voice vlan 6 (voice vlan manual mode send traffic untagged and the port PVID must be the voice vlan ID)