10-19-2007 06:53 AM - edited 03-05-2019 07:12 PM
What is the difference in using the "access" mode for the switchport and not?
For example, I have a switch that has the ports configured in the following way and all workstations can access the network in VLAN 45.
I cannot set port security on the ports because the ports are not dynamic or access ports.
But if it works without setting mode to access, what is the difference?
interface FastEthernet0/1
switchport access vlan 45
switchport voice vlan 250
no ip address
srr-queue bandwidth share 10 10 60 20
srr-queue bandwidth shape 10 0 0 0
mls qos trust device cisco-phone
mls qos trust cos
no mdix auto
auto qos voip cisco-phone
spanning-tree portfast
10-19-2007 07:03 AM
switchport mode access keeps a link from becoming a trunk.
Switches are set, by default, to automatically set up a trunk if the device it is connected to requests to do so, which your configuration would allow. If you used "switchport mode access vlan 45", your port would never become a trunk if someone hooked up another Cisco device to that port.
10-19-2007 07:27 AM
I believe you can certainly apply port security to these ports, we do it all the time, specifically to limit the number of MAC addresses. No reason it won't work for you.
Paul
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide