You can leverage LLDP-MED to assign voice traffic to the desired voice VLAN. After detection and setup, the IP phone on the network is segmented to its own VLAN for policy, prioritization, and reporting. The LLDP reception capabilities in FortiOS include LLDP-MED assignment for voice, voice signaling, guest, guest voice signaling, softphone, video conferencing, streaming video, and video signaling.
You can configureVLAN auto-assignment using the following steps:
- Set up the VLAN for the voice device
- Set up the DHCP server for the voice VLAN
- Sett up the LLDP network policy
- Enable LLDP on the physical interface that the VLAN belongs to
- Apply the LLDP network policy on the physical interface
- Confirm that the VLAN was assigned
config system interface edit "vlan_100" set vdom "root" set ip 192.168.1.99 255.255.255.0 set alias "voice_vlan" set device-identification enable set role lan set snmp-index 25 set interface "port10" set vlanid 100 next end
config system dhcp server edit 1 set dns-service default set default-gateway 192.168.1.99 set netmask 255.255.255.0 set interface "vlan_100" config ip-range edit 1 set start-ip 192.168.1.110 set end-ip 192.168.1.210 next end next end
config system lldp network-policy edit "1" config voice set status enable set tag dot1q set vlan 100 end next end
config system interface edit "port10" set vdom "root" set type physical set lldp-reception enable set lldp-transmission enable set snmp-index 14 next end
config system interface edit "port10" set lldp-network-policy "1" next end
- Connect an IP phone to the network.
- Check the IP address on the phone.
The IP address should belong to the voice VLAN.
- Sniff on the FortiGate incoming interface to see if traffic from the IP phone has the desired VLAN tag.
In this example, the voice traffic from the IP phone should be in VLAN 100.