From: Gary (liguoyi8@gmail.com)
Date: Tue May 08 2007 - 22:07:46 ART
Thanks a lot. I see.
With dot1q, phone's mac shows in both data and voice vlan. That is why it is
3.
When we connect one phone only, can I say that:
1. with dot1q voice vlan, we need to configure "max mac 2"
2. with dot1p voice vlan, we need to configure "max mac 1"
-----Original Message-----
From: Antonio Soares [mailto:amsoares@netcabo.pt]
Sent: Wednesday, May 09, 2007 1:33 AM
To: 'Gary'; 'Cisco certification'
Subject: RE: port security for voice vlan
Nothing better than an example (the 1111.1111.1111 is a router connected to
a CP-7970):
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Rack1SW1#sh runn int g0/7
Building configuration...
Current configuration : 117 bytes
!
interface GigabitEthernet0/7
switchport access vlan 100
switchport voice vlan dot1p
spanning-tree portfast
end
Rack1SW1#sh mac-address-table int g0/7
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
100 0000.1111.1111 DYNAMIC Gi0/7
100 0019.55b9.4274 DYNAMIC Gi0/7
Total Mac Addresses for this criterion: 2 Rack1SW1#
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Rack1SW1#sh runn int g0/7
Building configuration...
Current configuration : 115 bytes
!
interface GigabitEthernet0/7
switchport access vlan 100
switchport voice vlan 200
spanning-tree portfast
end
Rack1SW1#sh mac-address-table int g0/7
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
100 0000.1111.1111 DYNAMIC Gi0/7
100 0019.55b9.4274 DYNAMIC Gi0/7
200 0019.55b9.4274 DYNAMIC Gi0/7
Total Mac Addresses for this criterion: 3 Rack1SW1#
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Gary
Sent: terga-feira, 8 de Maio de 2007 17:28
To: 'Cisco certification'
Subject: port security for voice vlan
Hi Group,
I was confused by the answer of one NMC lab. Can someone help me on this?
When we configure port security maximum mac address with voice vlan (one
phone with one PC), what should be the correct number, 3 or 2?
1.
#interface fa0/1
#switchport voice vlan 10
#port security max mac 3
(Most references say 3, but some say 2?)
2
#interface fa0/2
#switchport voice vlan dot1p
#port security max mac 2
(NMC lab says 2)
thanks,
Gary
This archive was generated by hypermail 2.1.4 : Fri Jun 01 2007 - 06:55:20 ART