We are noticing "someone" is moving ip-phones of meeting rooms (some of them are hands-free). To solve this issue, we want to fix ip-phone mac address to port switch. By this way, meeting rooms IP-phone will work only in fixed switch ports. If "someone" try to disconnect one IP-phone to connect it in another switch port, IP-phone didn´t work.
What do you think is the best way to achieve our objective?
We are thinking to use port-security in meeting rooms switch ports, but we don´t want to configure port-security in all switch ports (pc switch ports, printers switch ports,...). What is the behavior of port security if switch see Ip-phone mac address in a different port in which port security is not configured? IP-phone mac address could be blocked or allowed?
Perhaps "mac address-table" command could be useful.
Can you tell me you point of view about this issue?