HP 5500 Ei 5500 Si Switch Series Configuration Guide

 150 
Task Command Remarks 
Display the mapping between an 
isolate-user-VLAN and its secondary 
VLANs. display isolate-user-vlan 
[ isolate-user-vlan-id
 ] [ | { begin  | 
exclude  | include  } regular-expression ]
 
Available in any view 
 
Isolate-user-VLAN configuration example  
Network requirements 
As shown in  Figure 47:  
•   C
onnect Device A to downstream devices Device B and Device C. 
•   Configure VLAN 5 on Device B as an isolate-user-VLAN, assign the uplink port GigabitEthernet 
1/0/5 to...

 151 
[DeviceB-GigabitEthernet1/0/5] quit 
# Assign downlink ports GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 to VLAN 3 and 
VLAN 2, respectively, and configure the ports to operate in host mode. 
[DeviceB] interface gigabitethernet 1/0/1 
[DeviceB-GigabitEthernet1/0/1] port access vlan 3 
[DeviceB-GigabitEthernet1/0/1] port isolate-user-vlan host 
[DeviceB-GigabitEthernet1/0/1] quit 
[DeviceB] interface gigabitethernet 1/0/2 
[DeviceB-GigabitEthernet1/0/2] port access vlan 2...

 152 
 Route Interface: not configured 
 Description: VLAN 0005 
 Name: VLAN 0005 
 Tagged   Ports: none 
 Untagged Ports: 
        GigabitEthernet1/0/1            GigabitEthernet1/0/2            GigabitEthernet1/0/5 
 
 VLAN ID: 2 
 VLAN Type: static 
 Isolate-user-VLAN type : secondary    
 Route Interface: not configured 
 Description: VLAN 0002 
 Name: VLAN 0002 
 Tagged   Ports: none 
 Untagged Ports: 
    GigabitEthernet1/0/2            GigabitEthernet1/0/5 
 
 VLAN ID: 3 
 VLAN Type: static...

 153 
Configuring a voice VLAN 
Overview 
A voice VLAN is configured for voice traffic. After assigning the ports that connect to voice devices to a 
voice VLAN, the system automatically configures quality of service (QoS) parameters for voice traffic, to 
improve the transmission priority of voice traffic and ensure voice quality.  
Common voice devices include IP phones and integrated access devices (IADs). Only IP phones are used 
in the voice VLAN configuration examples in this document. 
OUI...

 154 
Automatic mode is suitable for scenarios where PCs and IP phones connected in series access the 
network through the device and ports on the device transmit both voice traffic and data traffic at the 
same time, as shown in  Figure 48. W
 hen the voice VLAN works normally, when the system reboots, 
the system reassigns ports in automatic voice VLAN assignment mode to the voice VLAN after the 
reboot, ensuring that existing voice connections  can work normally. In this case, voice traffic 
streams...

 155 
Port link 
t
ype Voice VLAN 
assignment mode  Support for tagged 
voice traffic Configuration requirements 
Manual  The PVID of the port cannot be the voice VLAN. 
Configure the port to permit packets of the voice 
VLAN to pass through. 
Hybrid Automatic 
Yes  The PVID of the port cannot be the voice VLAN.
 
Manual 
The PVID of the port cannot be the voice VLAN. 
Configure the port to permit packets of the voice 
VLAN to pass through tagged. 
 
•
  IP phones send untagged voice traffic 
When IP...

 156 
in manual VLAN assignment mode, the port forwards all received untagged packets in the voice 
VLAN. In normal mode, voice VLANs are vulnerable to traffic attacks. Malicious users might send 
large quantities of forged voice packets to consume the voice VLAN bandwidth, affecting normal 
voice communication.  
•   Security mode —Only voice packets whose source MAC addresses match the recognizable OUI 
addresses can pass through the voice VLAN-enabl ed inbound port, but all other packets are 
dropped....

 157 
Configuring QoS priority settings for voice traffic on 
an interface 
In voice VLAN applications, you can improve the quality of voice traffic by configuring the appropriate 
QoS priority settings, including the Class of Service (CoS) and Differentiated Services Code Point (DSCP) 
values, for voice traffic. Voice traffic carries its own QoS priority settings. You can configure the device 
either to modify or not to modi fy the QoS priority settings carried by incoming voice traffic.  
Configuration...

 158 
Step Command Remarks 
2.  Set the voice VLAN 
aging time.  voice vlan aging
 minutes  Optional. 
By default, the aging time of a voice VLAN is 1440 
minutes. 
The voice VLAN aging time configuration is only 
applicable on ports in automatic voice VLAN 
assignment mode.  
3.
  Enable the voice 
VLAN security 
mode.  voice vlan security enable 
Optional. 
By default, the voice VLAN security mode is enabled.
 
4.
  Add a 
recognizable OUI 
address.  voice vlan mac-address 
oui 
mask  oui-mask  [...

 159 
 
Step Command Remarks 
1.  Enter system view. 
system-view  N/A 
2.  Enable the voice 
VLAN security 
mode.  voice vlan security enable  Optional. 
By default, the voice VLAN security mode is 
enabled. 
3.
  Add a 
recognizable OUI 
address.  voice vlan mac-address 
oui mask 
oui-mask  [  description  text ]  Optional. 
By default, each voice VLAN has default OUI 
addresses configured. For the default OUI 
addresses of different vendors, see 
Table 15. 
4.  Enter interface 
view.  interface...