Cisco switch for IP Office

[teletechman]

I have an IT provider that is asking me about using their Cisco switch for the voice VLAN. He is asking questions I am not sure of with the set up that is current in his switch, done by someone else. This is the programming he is questioning. Which is the best way to set up the ports on the Cisco switch?
Mike

Please find below our current Cisco port configuration

interface GigabitEthernet2/0/11
switchport trunk allowed vlan 1,100
switchport mode trunk
storm-control broadcast level 25.00
storm-control action shutdown
spanning-tree portfast
!

Default data VLAN is 1, subnet 10.0.0.0/24
Default voice VLAN is 100, subnet 10.0.100.0/24

I think Cisco ports should be set this way:

interface GigabitEthernet1/0/4
switchport access vlan 1
switchport mode access
switchport voice vlan 100
//this is all additional port security configuration
switchport port-security maximum 3
switchport port-security violation restrict
switchport port-security aging time 2
switchport port-security aging type inactivity
switchport port-security
storm-control broadcast level 25.00
storm-control action shutdown
spanning-tree portfast
spanning-tree portfast
spanning-tree bpdufilter enable
spanning-tree bpduguard enable
spanning-tree guard loop

 

[Manie3]

@Teletechman

They are using vlan 100 for voice.

Will they give you access to the switch?

ACSS

Just another day in the life of ME

 

[teletechman]

yes VLAN 100 for voice no access. They just want to know the best practice. They are seeing right now "switchport mode trunk" and don't think is best practice.

 

[rdoubrava]

Are you using the DATA port on the Phone ?

 

[teletechman]

yes

 

[rdoubrava]

Your setup is correct
I always felt that best practice was not to use VLAN 1.
spanning-tree portfast automatically turned on with the switchport VOICE VLAN command.

I also turn off CDP