Just a shot in the dark, but I believe this is due to the phone hitting the switch first as an access device, then as a phone device.
If you watch a phone right after it is hooked up to a Cisco switch, it first connects to the switch as a data device, sends CDP packets, gets the voice vlan, then switches over to the voice vlan to do all its operation.
This depends on what IOS version configuration guide you read, on 12.2(25)EWA it states the following:
When you enable port security on an interface that is also configured with a voice VLAN, you must set the maximum allowed secure addresses on the port to two plus the maximum number of secure addresses allowed on the access VLAN. When the port is connected to a Cisco IP phone, the IP phone requires up to two MAC addresses. The IP phone address is learned on the voice VLAN and might also be learned on the access VLAN. Connecting a PC to the IP phone requires additional MAC addresses.
So, that is total of three if you are only going to connect an IP Phone and a PC to the IP Phones data port to the PC.
On Later code, they allow you to configure maximum secure addresses per VLAN. You can set a maximum for either the data VLAN or the voice VLAN. You can also set a maximum per-port, just as with access ports.
This is actually a pretty cool feature, i didn't even know it existed until I was looking for a solution to advertise a subnet (prefix in BGP talk), only if a certain condition existed. This is exactly what conditional advertisements does
j ai une question j ai achete un routeur cisco 887VA-k9 , je le configuré avec la configuration ci- dessous
si je le lier avec mon pc portable sur l un de ses ports directement ça marche toute est bien ( la connexion internet + m...
Attached policy provides CLI access to the Cisco 4G router over text messaging. Two files are in the attached .tar file:
2. PDF with instructions on how to load and use the .tcl file.