cisco ip phone switch port configuration

interface GigabitEthernet x/x

switchport access vlan 763 ----------------------PC所绑定的vlan

switchport mode access

switchport voice vlan 773 ----------------------voice vlan

switchport port-security maximum 3 ----------经过NAC的话需要配置为3，端口最多允许3个MAC地址

switchport port-security ------------------------开启端口安全总开关

switchport port-security aging time 2 ---------MAC地址老化时间为2分钟，到达时间地址删除

switchport port-security violation restrict ------设置违反端口安全规则后的工作方式为限制

switchport port-security aging type inactivity --当不活动时删除地址，其它地址可以变成安全地址（允许通过的地址）。

ip arp inspection limit rate 10

snmp trap mac-notification change added

spanning-tree portfast

spanning-tree bpduguard enable

ip verify source

ip dhcp snooping limit rate 10