Data and Voice VLAN Config

[johnlloyd_13]

hi all,

just a quick question, can the below config be converted on a cisco switch port.

INITIAL CONFIG:

interface FastEthernet0/1

switchport trunk encapsulation dot1q

switchport trunk native vlan 2  

switchport mode trunk  

switchport voice vlan 1  

no mdix auto

spanning-tree portfast

CONVERT TO:

interface FastEthernet0/1

switchport access vlan 2  

switchport mode access

switchport voice vlan 1  

no mdix auto

spanning-tree portfast

[Edison Ortiz · Accepted solution]

I don't see why not.

[ALIAOF_ · Accepted solution]

Yes that is how we setup our ports:

interface FastEthernet0/3

switchport access vlan 10

switchport mode access

switchport voice vlan 20

switchport port-security maximum 2

switchport port-security maximum 1 vlan access

switchport port-security

switchport port-security aging time 1

switchport port-security violation restrict

switchport port-security aging type inactivity

no logging event link-status

srr-queue bandwidth share 1 30 35 5

priority-queue out

mls qos trust cos

auto qos trust

spanning-tree portfast

[Bhishma Khanna · Accepted solution]

Hi, Yes you can use this configuration to connect your workstation(DATA) to switch via IP phone(voice).

In this configuration the workstation would utilize the data vlan and the IP phone would utilize the data vlan first and then the voice vlan.

Thanks.

[pieterh]

Apart from the answer "yes" to your question:
it is not custom to use vlan 1 as voice vlan
Vlan 1 is default used for many other packets too

Sent from Cisco Technical Support iPad App

[johnlloyd_13]

thank you guys for your feedback! +5

i just wanted to confirm before i go and make changes (although deep in my head i already know).

pieterh,

yes, from a security standpoint i understand. but the network is already in place (a long time ago) and it would be a major change just to change VLAN 1.

[Leo Laohoo]

no mdix auto

It will work, John but I question the "sanity" of this line.

I do not see the benefits gained by disabling MDI/MDI-X. 

[johnlloyd_13]

thanks pre for spotting this!

good stuff! (as what my australian boss tells me).

maybe i can enable mdix back.

i'm not sure why the previous admin did this.