LLDP Required of pfSense When Using LLDP Switch?

  • I'm trying to get VOIP phones connected to a tagged VLAN by way of LLDP. Port assignment is for the non-VOIP VLAN as untagged/native, Voice VLAN tagged with setting of Voice network to Voice VLAN with LLDP on. Basically, VOIP phones with LLDP will go on one VLAN, computers that are connected to other switch port on phones will be on the other VLAN.

    Problem is that both phone and computer go on non-VOIP VLAN. I'm using UniFI Switch. Firmware from March 2018. I checked on those forums and I was doing everything right and people had it working the way I had it. I know there is LLDP package for pfSense, but with the switch I'm using, is pfSense even supposed to be involved in the LLDP process? I was under the impression that it did not, but I wanted to check to see if it actually is needed. I would've simply installed it to check, but this site will, but doesn't currently have pfSense firewall, but a FortiGate, in which LLDP is enabled.

    Phones are VVX 300 and I am unsure if LLDP is enabled by default, but it seems likely that they are. I'm not on-site to check on phone.

  • IIRC Polycom phones run LLDP.

    The phones will talk using LLDP to the switch rather than pfsense.

  • LLDP functions only at layer 2 and between immediate neighbours.  So, if you ran it on pfSense, it would only tell you about the switch that pfSense connects to and not much else.  As for VLAN tagging, that would be done by the switches the phones plug into, if supported.  Some switches can recognize the MAC prefix and assign specific ones, such as phones, to a VLAN.  Another way is for the DHCP server, using option 43, to assign the VLAN to a device.  As far as I know, LLDP is used to collect info on neighbour devices, not configure them.

  • Thanks. About this option 43. I saw 132 that dealt with VLAN's, but I can't figure out how to use that feature. How is it that I implement it?

  • Just a bump on my last question about how to use a DHCP special option setting for assigning VLAN's. Thanks.

Log in to reply