What is the problem with this configuration?

Refer to the exhibit. What is the problem with this configuration?

Refer to the exhibit. What is the problem with this configuration?

A.
Spanning tree PortFast cannot be configured on a port where a voice VLAN is configured.

B.
Sticky secure MAC addresses cannot be used on a port when a voice VLAN is
configured.

C.
Spanning tree PortFast cannot be configured on a port when a sticky secure MAC
address is used.

D.
The switch port must be configured as a trunk.

Explanation:
These are the voice VLAN configuration guidelines according to Cisco:
• You should configure voice VLAN on switch access ports.
• The voice VLAN should be present and active on the switch for the IP phone to correctly
communicate on the voice VLAN.
• The Port Fast feature is automatically enabled when voice VLAN is configured. When
you disable voice VLAN, the Port Fast feature is not automatically disabled.
• When you enable port security on an interface that is also configured with a voice VLAN,
you must set the maximum allowed secure addresses on the port to at least two plus the
maximum number of secure addresses allowed on the access VLAN. When the port is
connected to a Cisco IP phone, the IP phone requires up to two MAC addresses. The

address of the IP phone is learned on the voice VLAN, and it might or might not be learned
on the access VLAN. Connecting a PC to the IP phone requires additional MAC addresses.
• If any type of port security is enabled on the access VLAN, dynamic port security is
automatically enabled on the voice VLAN.
• You cannot configure port security on a per-VLAN basis.
• You cannot configure static secure or sticky secure MAC addresses on a voice VLAN.

http://www.cisco.com/en/US/docs/switches/lan/catalyst2940/software/release/12.1_22_ea2/c
onfiguration/guide/swvoip.html



Leave a Reply 1

Your email address will not be published. Required fields are marked *


Ethan

Ethan

None of these answers look correct…

A is incorrect – PortFast is actually automatically enabled on a port that is configured with a Voice VLAN

B is incorrect – This may have been an older iOS limitation, but sticky MACs can currently be set on ports with voice VLANs per https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/b_consolidated_config_guide_3850_chapter_011111.html

C is incorrect – PortFast has nothing to do with Port Security

D is incorrect – The port configured as an access port with a Voice VLAN is standard.