{"id":189,"date":"2016-04-06T23:05:06","date_gmt":"2016-04-06T13:35:06","guid":{"rendered":"https:\/\/blog.davidmonro.net\/?p=189"},"modified":"2016-04-06T23:09:34","modified_gmt":"2016-04-06T13:39:34","slug":"cisco-7965-ip-phones-and-tp-link-gigabit-smart-switches","status":"publish","type":"post","link":"https:\/\/blog.davidmonro.net\/index.php\/2016\/04\/06\/cisco-7965-ip-phones-and-tp-link-gigabit-smart-switches\/","title":{"rendered":"Cisco 7965 IP phones and TP-Link Gigabit Smart Switches"},"content":{"rendered":"<p>I had some interesting times trying to get my Cisco 7965 working with a TP-Link SG2210P swtich.<\/p>\n<p>The way I want this to work is have all ports on the switch configured as access ports on my normal VLAN, but have the phone automatically run on a different VLAN, and be able to use the pass-through port on the phone for another device on the normal VLAN (the way they would normally be configured in an all-cisco environment). I also didn&#8217;t want non-phone devices to be able to access the voice VLAN.<\/p>\n<p>At first all seemed to work fine, I configured the OUI filter entry to match the mac address prefix of the phone (the default Cisco rule it comes with doesn&#8217;t cover the phone I have). I also configured the switch-wide voice vlan settings, and set the &#8220;voice vlan mode&#8221; of all the access ports to &#8220;auto&#8221;.<\/p>\n<p>However, I later noticed that the phone was trying to get a DHCP address on my normal VLAN instead of the voice one. I think that what had happened is that I&#8217;d switched on support for LLDP and LLDP-MED, and now the phone was being told by the switch to use the voice vlan, and was also being told that the voice vlan wasn&#8217;t present on the port, thus confusing the phone thoroughly. After lots of messing around I have come to the following conclusion:<\/p>\n<ul>\n<li>Do enable LLDP and LLDP-MED<\/li>\n<li>Set the &#8220;voice vlan mode&#8221; to &#8220;manual&#8221; for the access ports.<\/li>\n<li>Explicitly allow the voice vlan (tagged) on the access ports.<\/li>\n<li>Use the &#8220;voice vlan security&#8221; feature to prevent non-phone devices getting onto the voice vlan (this uses the OUI filter entries again).<\/li>\n<\/ul>\n<p>The end result should look like this:<\/p>\n<pre>sw1-office#show run int g 1\/0\/5\r\ninterface gigabitEthernet 1\/0\/5\r\n  switchport general allowed vlan &lt;your data vlan id&gt; untagged\r\n  switchport general allowed vlan &lt;your voice vlan id&gt; tagged\r\n  switchport pvid &lt;your data vlan id&gt;\r\n  no switchport general allowed vlan 1\r\n  switchport voice vlan mode manual\r\n  switchport voice vlan security\r\n  lldp med-status\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>I had some interesting times trying to get my Cisco 7965 working with a TP-Link SG2210P swtich. The way I want this to work is have all ports on the switch configured as access ports on my normal VLAN, but have the phone automatically run on a different VLAN, and be able to use the [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[10,13,11,12],"class_list":["post-189","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cisco","tag-networking","tag-tp-link","tag-voip"],"_links":{"self":[{"href":"https:\/\/blog.davidmonro.net\/index.php\/wp-json\/wp\/v2\/posts\/189","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.davidmonro.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.davidmonro.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.davidmonro.net\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.davidmonro.net\/index.php\/wp-json\/wp\/v2\/comments?post=189"}],"version-history":[{"count":12,"href":"https:\/\/blog.davidmonro.net\/index.php\/wp-json\/wp\/v2\/posts\/189\/revisions"}],"predecessor-version":[{"id":206,"href":"https:\/\/blog.davidmonro.net\/index.php\/wp-json\/wp\/v2\/posts\/189\/revisions\/206"}],"wp:attachment":[{"href":"https:\/\/blog.davidmonro.net\/index.php\/wp-json\/wp\/v2\/media?parent=189"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.davidmonro.net\/index.php\/wp-json\/wp\/v2\/categories?post=189"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.davidmonro.net\/index.php\/wp-json\/wp\/v2\/tags?post=189"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}