From: Skinner, Stephen (Stephen.Skinner@rbs.co.uk)
Date: Sun Sep 17 2006 - 14:43:57 ART
Sidalo ,
thanks for the clarification, that has helped alot
many thanks
Stephen Skinner
_____
From: Sidalo [mailto:sidalo@gmail.com]
Sent: 17 September 2006 18:35
To: Skinner, Stephen
Cc: Cisco certification
Subject: Re: 3550 port security , need some clarification please
*** WARNING : This message originates from the Internet ***
It should be the access vlan but also on the port.
If you have 6 total MACs on the vlan but only 1 of those is on the port you
dont need to add all 6, just the one.
Add 2 MAC spots for the phone in addition to the config you would have if
the phone was not there.
So if you only have 1 PC off of the phone the total would be 3. If you have
multiple devices on the other side of the phone it would be whatever that
number is plus two.
On 9/17/06, Skinner, Stephen <Stephen.Skinner@rbs.co.uk
<mailto:Stephen.Skinner@rbs.co.uk> > wrote:
Gents ,
I am looking for some clarification please .
The doc CD says the following in reference to static Mac address's in voice
vlans .
When you enable port security on an interface that is also configured with a
voice VLAN, you must set the maximum allowed secure addresses on the port to
at least two plus the maximum number of secure addresses allowed on the
access VLAN. When the port is connected to a Cisco IP phone, the IP phone
requires up to two MAC addresses. The address of the IP phone is learned on
the voice VLAN, and it might or might not be learned on the access VLAN.
Connecting a PC to the IP phone requires additional MAC addresses
So lets say I am using DOT1Q Tagged frames and not DOT1P priority tagged
frames
I have got 6 machines on this VLAN , (NO other phones. just PC's)
And there are two devices (phone and PC) on this port fa0/14
I would config as per , YES ?
Int fa0/14
Switchport port-security maximum 8
Switchport port-security mac-address 0000.0000.0000.0001
<http://0000.0000.0000.0001>
Switchport port-security mac-address 0000.0000.0000.0002
<http://0000.0000.0000.0002>
Many thanks
Stephen Skinner
The Royal Bank of Scotland plc, Registered in Scotland No. 90312. Registered
Office: 36 St Andrew Square, Edinburgh EH2 2YB
Authorised and regulated by the Financial Services Authority.
This e-mail message is confidential and for use by the addressee only. If
the message is received by anyone other than the addressee, please return
the message to the sender by replying to it and then delete the message from
your computer. Internet e-mails are not necessarily secure. The Royal Bank
of Scotland plc does not accept responsibility for changes made to this
message after it was sent.
Whilst all reasonable care has been taken to avoid the transmission of
viruses, it is the responsibility of the recipient to ensure that the onward
transmission, opening or use of this message and any attachments will not
adversely affect its systems or data. No responsibility is accepted by The
Royal Bank of Scotland plc in this regard and the recipient should carry out
such virus and other checks as it considers appropriate.
This archive was generated by hypermail 2.1.4 : Sun Oct 01 2006 - 16:55:40 ART