IP PHONES

[francisco-ortega]

I have IP telephony, the ip phones have two ports (switch integrated). Use the two ports from ip phone because not have more port switch free to PC´s. The problem is the security because any people can connect to second port from ip phone with a LAPTOP and have access entire to my network. The port have two VLAN´s, VLAN from data for PC´s and VLAN from Voice for IP¨Phones. The port from switch 3524 is configurated as trunk, but can´t specify the MAC addres permit for this port. How to restrict the access ?

[degg]

There are a couple ways you can do this. First, you can disable the PC port on the phone via CallManager. This prevents any access to the network except the phone.

On the switch, you can change the Native vlan of the port, and then restrict that vlan with ACL's. This will let users connect, but only on a certain vlan and then you can control what they can do while connected.