- We generally recommend using Spanning Tree Protocol (see Wikipedia) with your switches. With Spanning Tree enabled, however, you should make sure the ports you are connecting phones or similar devices to are configured appropriately. Depending on the switch manufacturer and firmware, the recommended option is known as "PortFast" or "Edge Mode". The option ensures that a connected device is connected immediately and not initially blocked for 30 seconds, etc., as usual with spanning tree. Payload-based Spanning Tree on Cisco switches (PVST+ Mode) must be disabled!
- Disabling Proxy-ARP mechanisms, we further recommend protecting against MAC-Spoofing.
- Most phones are compatible with VLANs. The VLAN-IDs used are either configured in the customer’s location options in the administration portal or need to be provided by the local switch infrastructure using LLDP. We recommend the LLDP-MED protocol. On most phones sold by NFON the LLDP-MED protocol (Link Layer Discover Protocol - Media Endpoint Devices) is enabled by default. This protocol is a Layer2 protocol to support interoperability of VoIP devices and other devices on the network and to e.g. show identities and capabilities and to manage the local network environment, especially VLAN segmentation. To use one of these functions for VLAN configuration on the customer’s LAN, you should enable the respective function on the customer’s network devices. When using LLDP, NFON phones support and use all VLAN-IDs configured for the customer switch in the infrastructure (as part of the LLDP) for both voice and data. If the customer wants to connect laptops or PCs in series which use the switch port of the phones, any data traffic from this port will be routed to the data VLAN.
Please note, at this time softphone clients, WebRTC clients, ATAs (only Patton SN4xxx) and DECT systems do not support providing VLAN via the portal.
In this case a dedicated VLAN allocation on the switchport can be used with an untagged VLAN port.