This is done when a phone is used on a port with a PC connected behind it.
This is configured by setting the Voice VLAN to 4 ( in your example). Only the untagged Vlan 1 and the Tagged Vlan 4 will be allowed through this port.
interface switchport 0/10
description Phone and PC
switchport voice vlan 2