Question on switchport port-security on 2960 stacked switches

[ubergeek1]

I have a stack of 2960's that I would like to configure using switchport port-security. The interfaces are set up like this:

interface GigabitEthernet1/0/31

switchport voice vlan 100

spanning-tree portfast

How do I add switchport port-security to the above?  Also how do I apply it to a range?   How does this affect the trunk ports like these:

interface GigabitEthernet3/0/48

description TRUNK

switchport mode trunk

Thanks

[acampbell]

Hi,

Start by reading this section of the 2960S config guide

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_53_se/configuration/guide/swtrafc.html#wp1038501

Regards,
Alex.
Please rate useful posts.

[ubergeek1]

I still need help. How do I apply switch ort security on the 2960 stack and exclude certain ports?  Are there any cons with VoIP?

[schaef350]

Don't do that on the trunks.

Get a range of ports similar to this:

Switch(config)#interface range fastethernet0/1 – 20

or this:

Switch(config)#interface range fastethernet0/1 – 4 , fastethernet0/10 – 15

Do this on all the access ports:

SW1(config-if)# switchport porty-security maximum 3

One mac address for the PC and two for the phone.  One for when it comes up and one for after it CDP's and moves its self over to the voice VLAN.  Thats as per a cisco recomendation I got a while ago...

- Be sure to rate all helpful posts