MAC address assignment for IP sets 2

[Rhinorhino]

What is your opinion on assigning the MAC address on the POE switch to prevent anyone from moving the IP handsets around or plugging in other handsets on the switch?

Is this something that is routinely done or suggested for security or Best Practices?

 

[derfloh]

If you want to have port security you should implement AAA with a Radius Server.

You don’t want to maintain MAC addresses on the switches.

 

[Rhinorhino]

Thanks for the recommendation.

Do you prefer that the customer have you make any moves for handsets in their offices or do you allow them to physically move their handsets if an office or staff is moving to different locations where an existing a buy a network connection is located.

For example if staff swaps offices.

 

[derfloh]

I allow the customer to move the phones. Having a good network setup (client port untangled, voice port tagged on the switch, working DHCP server) makes it pretty easy. Depending on the setup (centralized PBX/distributed PBXs) a new login to the PBX might be necessary.