cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
357
Views
15
Helpful
2
Replies

Port Secury Voice Vlan only

smithjacob
Level 1
Level 1

Problem: Employees are taking their phones with them when they move offices.

We are trying to use Port-security to lock phones to their access ports in each office without hard coding each port with the mac address. We got the phones Mac address to stick but need to make the access vlan to remain dynamic. Impossible? 

description Voice and Data
switchport access vlan 1#
switchport mode access
switchport voice vlan 2#
switchport port-security maximum 3
switchport port-security maximum 1 vlan voice
switchport port-security
switchport port-security mac-address sticky
switchport port-security mac-address sticky xxxx.xxxx.xxxx vlan voice

2 Replies 2

Hi

 Possible but you need something else.  With ISE and profile would be possible play with vlan dynamicaly. And ISE would allow you to use dot1x ou Mab which is way better than port-security.

 

Just an example

 

https://blog.arronsmalley.com/blogs/tech/networking/dynamic-voice-vlans-with-cisco-ise/ 

smithjacob
Level 1
Level 1

Is there any way to do this without ISE, using switch config capabilities?

Review Cisco Networking products for a $25 gift card