Private VLANs (PVLAN, Port Isolation) & 3CX

[poynter.net]

We are implementing a network with port isolation for the PC Clients.

Do we need to leave the ports that have phones connected as open (unprotected)?

This should then allow each phone to transmit to every other device for local phone-to-phone calls. As well as respond to multicast requests for provisioning.

I'm guessing if we protected the phone ports, then the PBX would need to deliver audio as that would be on an unprotected port.

 

[eddv123]

Hi poynter.net,

What sort of kit are you using for your network? Router/Firewall & Switching?

The main concern you will always have with VLAN's with 3CX is getting voice and data to talk to one another whilst keeping segregated.

If you are using 3CX phone on you data network in CTI mode with a supported phone, data and voice will need to be routed via the firewall.

3CX now supports VLAN tagging and other port based parameters - see under extensions & Provisioning, but you must have a supported phone model.

https://www.3cx.com/sip-phones/vlan-configuration/