Port Security: Voice + Data on One Access Port

Bundle lab · $29.99

Harden a real desk port that carries both data (PC) and voice (IP phone) using switchport voice vlan and access vlan on a single access port. Apply port security with a maximum that accounts for two MAC addresses (phone + PC) so a third device is restricted. A deliberate trunk allow-list drift on the inter-switch link initially blocks the Voice VLAN; learners must repair the trunk and then verify port-security state on the desk port.

Learning objectives

• Create and name User and Voice VLANs on L2 switches (no Layer-3).
• Configure an access port that carries both the data VLAN (PC) and the voice VLAN (IP phone) on the same physical port.
• Enable port security on a host-facing access port with a maximum of 2 MAC addresses, choosing a violation response that drops and counts frames from an additional device without disabling the port.
• Harden the trunk: native VLAN 999, allowed VLANs, and nonegotiate.
• Verify secured addresses and maximum on the desk port using show port-security interface.
• Fix a trunk allow-list drift that omits the Voice VLAN and confirm restoration.

Troubleshooting focus

• Diagnose and resolve the introduced fault: Trunk allow-lists, native VLAN alignment, and host VLAN assignment.
• Verify every link's interface status and IP addressing (`show ip interface brief`) and correct any interface that is down or misaddressed.
• Confirm each device's running configuration matches the lab objective, and bring any interface, route, or service that is not in its expected state back to health.
• Trace end-to-end reachability with ping/traceroute and isolate the first hop where forwarding fails.