port security issue

[ahmed.alshawaff]

I had 2 macs ( ipphone+pc) connected on same interface on cisco switch both configured as sticky and maximum 2 as below:

int g1/0/3

switchport port-security

switchport port-security max 2

switchport port-security violation restrict
 switchport port-security mac-address sticky
 

the issue is Ip-phone works fine but pc couldn't get ip address related to violation  , could anyone recommend troubleshooting commands to solve this ??

[johnd2310]

Hi,

Have you tried "switchport port-security max 3"?

Thanks

John

[balaji.bandi · Accepted solution]

I will do standard as per cisco guidelines 

switchport access vlan XXX   <<-- data
switchport mode access
switchport voice vlan ZZZ  <-- voice VLAN
switchport port-security maximum 4
switchport port-security
switchport port-security aging time 5
switchport port-security violation restrict
switchport port-security aging type inactivity

[ahmed.alshawaff]

problem is solved when I put maximum 4 , but I need to understand why we put maximum 4 ?

[balaji.bandi]

Sets the maximum number of secure MAC addresses for the interface - I do safe side 4 MAC Address.

For example : Phone, behind Phone PC ( may be users running some vm also in that PC, so give some flexibility.