Re Nick, n...@foobar.org (Nick Hilliard) wrote:
> >>Will try that - this sounds like the easiest way, although I dislike
> >>special constructs normally. But - this would allow me to keep the
> >>portfast setting which definitely helps when dealing with workstations...
>
> This isn't a special construct: it's the recommended way to handle cisco voip
> phones
> with desktop ethernet support.
Sure, but: This is not a Cisco phone. It works nonetheless, so CDP seems to
not be really necessary. Further testing notwithstanding, of course.
> >Also include "spanning-tree bpduguard enable" wherever possible. STP
> >BPDUs have no place on access ports.
>
> This should be accompanied by a generous helping of the "port security"
> commands.
> Otherwise you end up with a risk of l2 loops.
I usually disable ...guard and enable ...filter, but in view of these phones
having builtin switches, I might opt for the ...guard setting here, too.
Yours,
Elmar.
--
"Machen Sie sich erst einmal unbeliebt. Dann werden Sie auch ernstgenommen."
(Konrad Adenauer)
--------------------------------------------------------------[ ELMI-RIPE ]---
pgpKj1j6opN5W.pgp
Description: PGP signature
_______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
