Configuring A Trusted Boundary To Ensure Port Security - Cisco WS-C6506 Software Manual

Chapter 55 Configuring a VoIP Network
This example shows how to set the phone access port to the untrusted mode:
Console> (enable) set port qos 3/7 trust-ext untrusted
Port in the phone device connected to port 3/7 is configured to be untrusted.
Console> (enable)
Setting the Phone Access Port CoS Value
To set the phone access port CoS value, perform this task in privileged mode:
Task
Set the phone access port CoS value.
This example shows how to set the Layer 2 CoS value that is used by a phone access port in untrusted
mode:
Console> (enable) set port qos 2/1 cos-ext 3
Port 2/1 qos cos-ext set to 3.
Console> (enable)
Verifying the Phone Access Port QoS Configuration
To verify the phone access port QoS configuration, perform this task in normal mode:
Task
Verify the phone access port QoS configuration.
This example shows how to verify the phone access port QoS configuration:
Console> (enable) show port qos 3/4
<...Output Truncated...>
Port
----- --------- -------
3/4
<...Output Truncated...>

Configuring a Trusted Boundary to Ensure Port Security

This section describes the trusted boundary that is used to prevent security problems if users disconnect
their PCs from the networked Cisco IP Phones and plug them directly into the switch port to take advantage
of the QoS trust-cos switch port settings.
These sections describe the trusted boundary:
•
•
•
•
•
OL-8978-04
Ext-Trust Ext-Cos
untrusted 0
Supported Cisco IP Phones, page 55-34
QoS and Cisco IP Phone Configuration, page 55-34
QoS, Cisco IP Phone, and PC Configuration, page 55-34
Trusted Boundary Configuration Guidelines, page 55-35
Configuring a Trusted Boundary, page 55-36
Command
set port qos mod/ports cos-ext cos_value
Command
show port qos [mod[/port]]
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
Configuring VoIP on a Switch
55-33