Hi all. I'm trying to configure port security on our Dell 35XX switches here at the office. Up till now I've been using "max-addresses" mode to learn up to the maximum amount and disable if security was tripped. This was fine until I realized that upon disconnecting from the port and the interface goes down/down that the learned MACs are forgotten leaving the port available for connection.
So upon realizing this I decided to go the route of using mode "lock" to make sure the learned addresses would remain cached even if the port went down. This appeared to work and the addresses did remain after the port went down, but I ran in to an interesting problem.
So a quick summary of connectivity at the desktop. From the drop we connect to a phone and then to the PC via the phone. We are utilizing the voice VLAN and it works well. So PCs are on one VLAN, phones on another.
So, the issue. After configuring the port the phone is unable to communicate on the VLAN. The workstation has no problem. I should add that currently the workstation is in the untagged [native] VLAN, while the phone is in a tagged VLAN. I recreated the issue across several different drops on different switched to be sure it wasn't an issue with the switch, drop, etc.
I verify that the phone is being recognized and placed in the correct vlan with the "show bridge address table ethernet eth#" command. Without the "lock" mode the phone sees the network without any problem and is able to communicate.
What am I missing?!!