Computer Unidentified network issues when Behind IP Phone

[ziqex]

Hi,

We came across weird issues. Computers connected to Switch are not working correctly when connected via cisco desk phone - showing unidentified network. Without desk phone computers working fine. Issue started +- a week ago.

port config 

interface GigabitEthernet1/0/22
switchport access vlan 20
switchport mode access
switchport nonegotiate
switchport voice vlan 40
switchport port-security maximum 2
switchport port-security violation restrict
switchport port-security aging time 2
switchport port-security aging type inactivity
switchport port-security
spanning-tree portfast
spanning-tree bpduguard enable

Phone type: CP-8841

More than one computer & desk phone is impacted.

switch - cisco WS-C3850-48P - 16.12.07

CUCM - System version: 14.0.1.12900-161

Any suggestion's will be highly appreciated. Thank you

[balaji.bandi]

You have tried removing the Phone the PC works, Have you tried  Phone alone  without PC ? is the phone works.

For testing remove the Security configuration and test it or increase the maximum to 5 and age timing to higher.

[ziqex]

Phone connected on its own is working fine. Tested with internal and external calls. 

Port-security was changed.

switchport port-security maximum 5
switchport port-security aging time 5

[balaji.bandi]

So by changing to 5 is that fixed or still have issue.

if that is resolved make this as solution.

[ziqex]

Still the issue.

[balaji.bandi]

ok can you post show interface configuration again.

other question  in week time what was changed ? any DHCP changes ?

PC get IP address from right VLAN ? are you able to ping Local Gateway  and 8.8.8.8 ?

[ziqex]

No changes to the network.

Stack of 4 switches. Only one switch is impacted (*1 Active).

Switch# Role Mac Address Priority Version State
-------------------------------------------------------------------------------------
*1 Active  12 V05 Ready
2 Standby  11 V07 Ready
3 Member  10 V07 Ready
4 Member  9 V07 Ready

[Carlo Poggiarelli]

Hi,

Please reload switch 1 than send the output of a show port security and a show version 

Thanks

Carlo

[ziqex]

Port security was disabled but the same issue present:

sh port-security int g1/0/22
Port Security : Disabled
Port Status : Secure-down
Violation Mode : Shutdown
Aging Time : 0 mins
Aging Type : Absolute
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 0
Configured MAC Addresses : 0
Sticky MAC Addresses : 0
Last Source Address:Vlan : 682c.7b40.7401:640
Security Violation Count : 12

[Carlo Poggiarelli]

As I can see now the port config has maximum mac set to 1

Please increase the value and perform a shutdown no shutdown for that port

Please let us know 

Regards

Carlo

[ziqex]

Port security is disabled:

Port Security : Disabled

port config

interface GigabitEthernet1/0/22
switchport access vlan 20
switchport mode access
switchport nonegotiate
switchport voice vlan 40

[Carlo Poggiarelli]

Hi,

To verify the correct behavior of the switch side, you can issue the show port-security command and see if the count of Security Violations increases.

Please let us know.

Regards

Carlo

[ziqex]

sh port-security int g1/0/22
Port Security : Enabled
Port Status : Secure-up
Violation Mode : Restrict
Aging Time : 5 mins
Aging Type : Inactivity
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 5
Total MAC Addresses : 2
Configured MAC Addresses : 0
Sticky MAC Addresses : 0
Last Source Address:Vlan :
Security Violation Count : 12

Security Violation Count - doesn't increases

[MHM Cisco World]

Select one pc and check it mac 

The  do

Show mac address  <pc mac>

Show port-secuirty mac 

Check if pc show in other ports.

[MHM Cisco World]

Do you check points I ask?

The show port security show two mac connect 

Can I see

Show mac interface x

I need to see which vlan assign for both mac