FortiVoice 200D/200D-T/2000E-T2/VM Provisioning FortiFone Voice VLAN Using LLDP. Technical Note

Transcription

1 FortiVoice 200D/200D-T/2000E-T2/VM Provisioning FortiFone Voice VLAN Using LLDP Technical Note

2 FortiVoice 200D/200D-T/2000E-T2/VM Provisioning FortiFone Voice VLAN Using LLDP Technical Note June 18, st Edition Copyright 2014 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, and FortiGuard, are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance metrics contained herein were attained in internal lab tests under ideal conditions, and performance may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to the performance metrics herein. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet s internal lab tests. Fortinet disclaims in full any guarantees. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Technical Documentation Knowledge Base Customer Service & Support Training Services FortiGuard Document Feedback docs.fortinet.com kb.fortinet.com support.fortinet.com training.fortinet.com fortiguard.com techdocs@fortinet.com

3 Provisioning FortiFone voice VLAN using LLDP Starting from FortiFone 260/360/460/560, Cisco Discovery Protocol (CDP) is no longer supported. Instead, Link Layer Discovery Protocol (LLDP) support is added and can achieve what CDP can do and much more in a standardized way. LLDP works similarly to CDP, by exchanging LLDP data unit in the format of TLV (Type, Length, and Value) containing information such as system name and description, port number, VLAN name and ID, IP management address, and system capability (router, bridge, telephone, access point, and so on). Media Endpoint Discovery is an enhancement of LLDP, known as LLDP-MED, that provides the following facilities: Auto-discovery of LAN policies (such as VLAN, Layer 2 Priority, and Differentiated Services (DiffServ) settings) enabling plug and play networking. Device location discovery to allow creation of location databases and, in the case of Voice over Internet Protocol (VoIP), enhanced 911 services. Extended and automated power management of Power over Ethernet (PoE) end points. Inventory management, allowing network administrators to track their network devices, and determine their characteristics (manufacturer, software and hardware versions, serial or asset numbers). This technical note only describes how to auto-discover VLAN to voice traffic using LLDP-MED. It is assumed that you use the FortiVoice 200D/200D-T/2000E-T2/VM software. Use this note in conjunction with the FortiVoice 200D/200D-T/2000E-T2 Administration Guide. Scenario A customer needs to deploy FortiFones using the existing IT infrastructure which only has one network drop for each employee. The network switch supports 802.1Q VLAN tagging and LLDP-MED. FortiFones have two network ports: LAN and PC. The recommended solution is to connect FortiFones to the switch using LAN port and connect the computers to the PC port of FortiFones. VLAN tag needs to be enabled to segregate FortiFone voice network and PC data network. The network switch has to support LLDP-MED for this function to work. In this scenario, Cisco Catalyst 2960X LAN base is used. Fortinet Technologies Inc. Page 3 FortiVoice Technical Note

4 Network diagram Address plan VLAN 200: /24 for data network (PC), is the IP of VLAN interface on FVC200D. Before LLDP-MED is enabled on FortiFone, it will be placed in VLAN 200, like the PC. VLAN 100: /24 for voice network (FortiFones), is the IP of VLAN interface on FVC200D Native VLAN: /24 for untagged traffic is the IP of the physical port on FVC200D FortiVoice-200D/200D-T/2000E-T2/VM is also used as DHCP server in the scenario. Steps to provision FortiFone voice VLAN using LLDP Follow the procedures below to provision FortiFone voice VLAN using LLDP. To configure Cisco switch 1. Enable LLDP globally. By default LLDP is disabled. Switch (config)# lldp run 2. Create network policy to assign VLAN ID 100 for voice traffic. Switch (config)# network-policy profile 1 Switch (config-network-policy)# voice vlan 100 Fortinet Technologies Inc. Page 4 FortiVoice Technical Note

5 3. Apply the network policy in the interface connecting FortiFone. Switch (config)# interface giga 1/0/24 Switch (config-interface)# switchport mode access Switch (config-interface)# switchport access vlan 200 Switch (config-interface)# lldp transmitl Switch (config-interface)# lldp receive Switch (config-interface)# network-policy 1 4. Set interface connecting the FortiVoice 200D in trunk mode to carry traffic for different VLANs. Switch (config)# interface giga 1/0/1 Switch (config-interface)# switchport mode trunk To create VLAN interfaces and DHCP servers on FortiVoice 200D (skip if you do not use FortiVoice 200D as DHCP server) 1. Configure VLAN interfaces on the desired physical port. Create new interface, set type as VLAN, set physical port to any port desired (port2 in this scenario), and assign IP address. In this scenario, VLAN 100 is created for voice and assigned IP address , and VLAN 200 is created for data and assigned IP address Fortinet Technologies Inc. Page 5 FortiVoice Technical Note

6 2. Create DHCP servers for the physical port (native VLAN), VLAN 100, and VLAN 200. Fortinet Technologies Inc. Page 6 FortiVoice Technical Note

7 3. Enable auto provisioning in system setting and configure the TFTP server accordingly. To create a phone profile with LLDP enabled on the FortiVoice 200D LLDP is disabled on FortiFone by default. It needs to be enabled to auto-discover the voice VLAN configuration. 1. Create a phone profile (template) with LLDP enabled. Add the following lines into the related sections of the configuration file: [SYSTEM] function lldp enable [LAN] lldp_status on vlan_policy lldp Fortinet Technologies Inc. Page 7 FortiVoice Technical Note

8 To initially provision FortiFone using data VLAN to enable LLDP 1. Connect the network cable to the FortiFone and factory reset it if there is old configuration on it. After the reboot, it should display in the Unassigned Phone tab as shown below. Note that at this stage, the FortiFone is assigned an IP in the data VLAN (VLAN 200: x/24). 2. Create a new extension for the unassigned phone or assign it to an existing extension. Select the phone profile created in To create a phone profile with LLDP enabled on the FortiVoice 200D on page 7. If there are large numbers of FortiFones to provision, you can put all the extension configuration in a CVS file and import them into FVC-200D altogether. Fortinet Technologies Inc. Page 8 FortiVoice Technical Note

9 For more details, see the FortiVoice SIP Extension Auto Provisioning Technical Note. To use voice VLAN for FortiFone after reboot After the configuration is done, the FortiFones will reboot automatically. Wait for a few minutes, the FortiFone will be auto-provisioned to the VLAN configured (VLAN 100, x/24 in this scenario) and register with the FortiVoice 200D. Make a test call to verify the FortiFone is configured properly. Fortinet Technologies Inc. Page 9 FortiVoice Technical Note

10