I'm running into a bizarre issue trying to activate port-security on a 3750 switch with the ports in question connected to 7905 IP phones. I am trying to use the config shown below on the interface.
switchport access vlan 8
switchport trunk encapsulation dot1q
switchport mode trunk
switchport voice vlan 4
switchport port-security mac-address 0011.9236.b02b vlan 4
srr-queue bandwidth share 10 10 60 20
srr-queue bandwidth shape 10 0 0 0
mls qos trust device cisco-phone
mls qos trust cos
no mdix auto
storm-control broadcast level 10.00
storm-control multicast level 10.00
auto qos voip cisco-phone
I have five of these phone on this switch and in two cases I can apply this config with no issues. For the other three phones when I try to enter the static mac address is comes back to me with an error saying "found duplicate mac-address" and it refuses to accept the command. I am certain the mac address is correct and I've tried clearing the mac-address table on the interface and the mac address itself out of the CAM table. Still no luck. I've also tried removing the entire port-security configuration and re-applying it with no luck.
Anyone have any idea why this is happening and what I can do about it?
Thanks in advance for any assistance.
Cheers - Peter