03-01-2022 12:09 PM
Problem: Employees are taking their phones with them when they move offices.
We are trying to use Port-security to lock phones to their access ports in each office without hard coding each port with the mac address. We got the phones Mac address to stick but need to make the access vlan to remain dynamic. Impossible?
description Voice and Data
switchport access vlan 1#
switchport mode access
switchport voice vlan 2#
switchport port-security maximum 3
switchport port-security maximum 1 vlan voice
switchport port-security
switchport port-security mac-address sticky
switchport port-security mac-address sticky xxxx.xxxx.xxxx vlan voice
03-01-2022 12:42 PM - edited 03-01-2022 12:46 PM
Hi
Possible but you need something else. With ISE and profile would be possible play with vlan dynamicaly. And ISE would allow you to use dot1x ou Mab which is way better than port-security.
Just an example
https://blog.arronsmalley.com/blogs/tech/networking/dynamic-voice-vlans-with-cisco-ise/
03-03-2022 07:00 AM
Is there any way to do this without ISE, using switch config capabilities?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide