Looks lke they may be right (note this doc appears to have cli for non-ELS only!):
One thing you might try is to configure the voice vlan as untrusted. Access ports are untrusted by default. You may need to explicitly set interface to dhcp-untrust?? Maybe worth a try.