You can leverage LLDP-MED to assign voice traffic to the desired voice VLAN. After detection and setup, the IP phone on the network is segmented to its own VLAN for policy, prioritization, and reporting. The LLDP reception capabilities in FortiOS have been extended to support LLDP-MED assignment for voice, voice signaling, guest, guest voice signaling, softphone, video conferencing, streaming video, and video signaling.
You can configure this feature using the following steps:
- Setting up the VLAN for the voice device
- Setting up the DHCP server for the voice VLAN
- Setting up the LLDP network policy
- Enabling LLDP on the physical interface that the VLAN belongs to
- Applying the LLDP network policy on the physical interface
- Confirming that the VLAN was assigned
config system interface edit "vlan_100" set vdom "root" set ip 192.168.1.99 255.255.255.0 set alias "voice_vlan" set device-identification enable set role lan set snmp-index 25 set interface "port10" set vlanid 100 next end
config system dhcp server edit 1 set dns-service default set default-gateway 192.168.1.99 set netmask 255.255.255.0 set interface "vlan_100" config ip-range edit 1 set start-ip 192.168.1.110 set end-ip 192.168.1.210 next end next end
config system lldp network-policy edit "1" config voice set status enable set tag dot1q set vlan 100 end next end
config system interface edit "port10" set vdom "root" set type physical set lldp-reception enable set lldp-transmission enable set snmp-index 14 next end
config system interface edit "port10" set lldp-network-policy "1" next end
- Connect an IP phone to the network.
- Check the IP address on the phone.
The IP address should belong to the voice VLAN.
- Sniff on the FortiGate incoming interface to see if traffic from the IP phone has the desired VLAN tag.
In the example commands above, the voice VLAN was configured as VLAN 100. Therefore, voice traffic from the IP phone should be in VLAN 100.