lock down data on a voice network

[Prabath Godevithanage]

We have CUCM voice infrastructure and we need to give access to voice network on a remote site where we dont need any data access(no PCs on site only phones).any suggesions for Securing the network?possibly locking it down only for voice

remote site will be connecting through Microwave

Thanks in advance

[Ray Watkins · Accepted solution]

You can do the following to help with physical security:

disable switchport on the phones

shutdown all ports on the switch not in use by a phone or uplink

You can create an ACL on the router that blocks all traffic on the voice vlan except for RTP and signaling. This will block any traffic that is generated
by the workstation.

[d.hillman · Accepted solution]

In addition to Mr. Watkins suggestions you might want to consider port security.