How to setup a Netgear managed switch with VLAN 20?


  • How do I setup my NetGear switch for VLAN and LLDP to separate voice and data traffic to different routes within the same network?  
  • For example my GS110TP and GS728TP



The steps below assume the switch is factory default.

Step 1: accessing the web admin interface of the Netgear switch

  1. Connect the computer to the switch while no other ethernet cables are connected to the switch.
  2. Set the IP of the computer's ethernet card, connected to the switch, as static instead of automatic DHCP client:
  3. Open a web browser and input this IP as URL:
  4. Login with 'password' as the password.
  5. Change the password
    1. Click SecurityManagement Security, User Configuration, then Change Password.
    2. Fill in the old and new password.
    3. Click APPLY.
  6. Optional: set a static IP address for web admin access when the switch is in production
    1. Click System, Management, then IP Configuration.
    2. Change to Static IP Address
    3. Change or leave unchanged the current IP Address, subnet Mask and Default Gateway based on your network.
    4. Click APPLY.

Step 2: setting up the VLAN ID for VoIP

  1. Click the Switching tab then VLAN. The Basic VLAN Configuration will appear with stock VLAN IDs, ID 20 likely is not setup or missing.
  2. Click Voice VLAN (or AutoVOIP), click Disable for 'Voice VLAN Status' (usually VLAN ID 2), click APPLY.  
  3. Click VLAN then input a new line item with:
    1. 'VLAN ID' of '20'
    2. 'VLAN Name' as 'VoIP'.
    3. If it is editable, set 'VLAN Type' to be 'Static'.  
    4. Click ADD
  4. Click Voice VLAN then:
    1. change 'Voice VLAN Status' to 'Enable'.
    2. change 'Voice VLAN ID' to '20'.
    3. Verify that Class of Service is set to 6 (think QoS but only at the switch only where 7 is highest priority).
    4. Click APPLY.

Step 3: force VLAN 20 tagging for specific VoIP phones upon connection to specific ports

  1. Click SwitchingVoice VLANAdvanced, then Port Setting.  
  2. Select all the ports, 'Interface', by adding a checkmark to all the checkboxes.  
  3. Unselect two ports (one for data and one for VoIP)
    • Recommended first and port 24 (or last port) respectively as this is Voxter's standard.
  4. Under the 'Voice VLAN Mode' dropdown menu, select 'Enable' then click APPLY
  5. Click Advanced (or under AutoVOIP) then OUI (or OUI Addresses).  Add the first three hex values of the family of phone's mac address. 
    • See the OUI list here: 211713608
    • if applicable, insert your other phones/ATAs OUIs and description. 
  6. Click ADD.

Step 4: Allow VLAN 20 Tagged packets to go through

  1. Click SwitchingVLAN, Advanced, then VLAN Membership.
  2. Tagging voice traffic as VLAN ID 20:
    1. Change 'VLAN ID' to '20'.
    2. Expand the PORT line and set all the ports as 'T' by clicking the checkmark repeatedly until it is set to 'T'.
    3. Clear two ports to be blank (no T, U, etc) as these ports will be the redirected traffic to the proper voice versus data routers.  
      • Recommended port 1 as data and port 24 (or the last port) as voice.
    4. Set the voice port to 'U' (untagged).
    5. Also set the LAG as 'T'.
    6. Click APPLY.
    7. If a pop-up message that says "port __ is candidate in voice vlan20 and can’t configured as static member in the vlan" then:
      1. Only set the voice port to 'U'
      2. Set LAG as 'T' for all ports.
      3. Click APPLY.
    8. This allows (not forced) any device on any of the ports with a 'T' with value VLAN 20 to be allowed.

Step 5: Forcing the voice port to VLAN 20

  1. Click VLAN, Advanced then Port PVID Configuration.
  2. Add a checkmark to the voice port.
  3. Set the 'Configured PVID (1 to 4093)' to '20'
  4. Click APPLY.

Step 6: Enabling LLDP and LLDP-MED on phone device ports to force VLAN 20 upon layer 2 (think DHCP negotiation of phones with the switch)

  1. Click System, LLDP, Advanced, LLDP Port Settings.
  2. All ports should have 'Admin Status' as 'Tx and Rx'.
  3. Select all ports.
  4. Change the 'Notification' to 'Enable'.
  5. Change the 'Optional TLVs' to 'Enable'.
  6. Click APPLY.
  7. Click LLDP-MED Port Settings.
  8. Except the data and voice port: for each 'Port' set 'LLDP-MED Status', 'Notification', and 'Transmit Optional TLVs' to 'Enable' then APPLY.

Step 7: (optional) physically print labels of the ports

  1. Consider labeling the ports on the switch physically for future reference, especially the data and voice ports but possibly the daisy chain extra ports.

Step 8: connecting the data, voice and phone ports

  1. The data port can connect to the data router or data modem.
  2. The voice port can connect to the voice router or voice modem.
  3. All other ports connect to the phone devices.

Step 9: (optional) unsetting your static IP on your computer

  1. unset the ethernet card on your computer back to DHCP if this was its original state prior to Step 1.

Step 10: testing the switch for data and voice

  1. Have a router with DHCP server enabled.
  2. Pretest:
    1. Connect the laptop/computer to the router, the laptop should be assigned an IP and not be self-assigned.  
    2. Write down the IP address and network range.
    3. disconnect the laptop/computer to the router.
  3. Connect the voice router to port 24 assuming it acts as a DHCP server.
  4. Test A: Testing data only on port 2
    1. Connect the laptop/computer directly to port 2.
    2. The laptop/computer should not be assigned any IP except a self assigned IP which should be different network range than the pretest.
    3. If so, first test is clear.
  5. Test B: Testing voice only on port 2
    1. Connect a deskphone to port 2.
    2. Verify the IP given to the phone, it should be assigned the same network range as the pretest.
    3. If so, second test is clear.
  6. Test C: Testing data via the deskphone
    1. Connect the laptop/computer to the PC port on the phone from test B.
    2. Verify the IP given to the laptop/computer. 
    3. The laptop/computer should not be assigned any IP except a self assigned IP which should be different network range than the pretest.
    4. Part 1 of test C cleared.
    5. Connect a 2nd router (with DHCP server enabled with a different network range) to port 1 of the switch.
    6. Connect the laptop/computer to the PC port of the phone.
    7. Verify the IP given to the laptop/computer.
    8. It should be given an IP based on the network range of the 2nd router.
    9. If so, test C is clear.
  7. Repeat test A, B and C for the other ports (3 to 23 for a 24 ports switch).
Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request


Powered by Zendesk