Hi guys, Based on the discussion below, I added:
Known issues with IOS 12.2(35)SE5. IOS 12.2(44)SE6 is known to work. to the Bugs and limitations section of the 3550 module. Online documentation will be updated sometime during the night. Thanks for letting us know. On 05/01/11 12:20 PM, Melcher, Kerry wrote: > Hi Martin, > I just did some testing on a Cisco 3550-PWR 24 port switch using port > security. I started with IOS 12.2(35)SE5 and ran into some issues. After > upgrading to 12.2(44)SE6 it worked. > > Also if you are doing Cisco VoIP, you have to change your port configuration > on the 3550 and 3560 switches from using the older Trunk VoIP port config > used on the 3524 switches to the Access port with Voice Vlan config. There > is one note in the Cisco Switch Configuration Guide for IOS 12.2(55)SE page > 23-12 for setting up Port-Security that says "Voice VLAN is only supported on > access ports and not trunk ports, even though the configuration is allowed". > This gave me a lot of trouble testing port security on the 3550 and 3560 when > they were configured as Trunk ports. > > This is a sample config for a 3550 and 3560 switch port using port security > with VoIP. > interface FastEthernet0/1 > description F0/1 PF access-voice > switchport access vlan 81 > switchport mode access > switchport voice vlan 181 > switchport port-security maximum 2 > switchport port-security maximum 1 vlan access > switchport port-security maximum 1 vlan voice > switchport port-security > switchport port-security violation restrict > switchport port-security mac-address 0200.0000.0001 > priority-queue out > spanning-tree portfast > > This is a sample config for an older 3524 switch port using Mac Detection > with VoIP. The 3524 would not work with the Access port and Voice VLAN > config above. > interface FastEthernet0/1 > description F0/1 PF MAC DOT1Q port to IP Phone > switchport trunk encapsulation dot1q > switchport trunk native vlan 4 > switchport mode trunk > switchport voice vlan 181 > switchport priority extend cos 0 > snmp trap mac-notification added > snmp trap mac-notification removed > spanning-tree portfast > > > Thank You, > Kerry Melcher > > -- Olivier Bilodeau [email protected] :: +1.514.447.4918 *115 :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) ------------------------------------------------------------------------------ Gaining the trust of online customers is vital for the success of any company that requires sensitive data to be transmitted over the Web. Learn how to best implement a security strategy that keeps consumers' information secure and instills the confidence they need to proceed with transactions. http://p.sf.net/sfu/oracle-sfdevnl _______________________________________________ Packetfence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
