Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 1545 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to create VLAN setup for VoIP

Gsurfer

Hi! I'm trying to figure out how to set up VLAN/DCHP/firewall rules for VoIP. The VoIP phones will not have separate network connections to a separate switch, they will run on the same cable and out to each workstation PC. This means a phone and a PC each will share1 port on a switch. I want to put the phones on a separate VLAN and set up a DHCP server only for them. Where should I start? Thanks!



This thread was automatically locked due to age.
Parents
  • 0

    Hello Gsurfer,

    first of all you should choose phones with integrated 1 GBit/s Switches. If you use the 100 MBit/s the PC will also be limited to this.

    You should configure the port with PcVLAN untagged and PhoneVLAN tagged. Most phones have provisioning services which will push the boot image + configs in a way that the phones will go into the Phone VLAN after 1-2 restarts in the PC Network. This is done by a DHCP option which provides a network boot or/and or installation of a preconfigured firmware file. Once they are in the PhoneVLAN they will use the DHCP Server of the PhoneVLAN and get their final address. The PC will receive an IP Adress from the PCVlan through the second phone interface which is PcVLAN untagged.

    How this runs in detail depends very much on the hardware. What I described is a rough sketch how it works with SNOM phones.

    Best regards,
    BeEf

Reply
  • 0

    Hello Gsurfer,

    first of all you should choose phones with integrated 1 GBit/s Switches. If you use the 100 MBit/s the PC will also be limited to this.

    You should configure the port with PcVLAN untagged and PhoneVLAN tagged. Most phones have provisioning services which will push the boot image + configs in a way that the phones will go into the Phone VLAN after 1-2 restarts in the PC Network. This is done by a DHCP option which provides a network boot or/and or installation of a preconfigured firmware file. Once they are in the PhoneVLAN they will use the DHCP Server of the PhoneVLAN and get their final address. The PC will receive an IP Adress from the PCVlan through the second phone interface which is PcVLAN untagged.

    How this runs in detail depends very much on the hardware. What I described is a rough sketch how it works with SNOM phones.

    Best regards,
    BeEf

Children
  • 0 in reply to BeEf

    Thanks for the quick reply! Yes I've confirmed with the phone company/installer that they'll be providing gigabit phones. So you're saying that they'll need to set up their phones to obtain an IP via DHCP from the PcVLAN first to get onto the network, then they can update their firmware with the settings to connect to the PhoneVLAN after rebooting? I have no clue how this is done, I'm sure they'll be able to do this for their own phones.