Switching

You have configured both vlans on the port as access ports. That is not the way to go.

You need something like this:

set data-vlan vlan-id 102

set voice-vlan vland-id 52

set data-vlan interface ge-0/0/0.0

set ge-0/0/0 unit 0 family ethernet-switching port-mode trunk

set ge-0/0/0 unit 0 family ethernet-switching vlan members voice-vlan

set ge-0/0/0 unit 0 family ethernet-switching native-vlan-id data-vlan

Then the problem of seeing the mac of the IP phone should only be in the voice vlan

Some more info here:

http://www.juniper.net/techpubs/en_US/junos9.0/topics/concept/802-1x-lldp-lldp-med-understanding.html

http://kb.juniper.net/InfoCenter/index?page=content&id=KB11062&smlogin=true

Hope this helps

Hello Marc,

Thanks for your replay.

I have not problem to go to network of data or phone.

By port un have phone et pc.  (swicth (ge-2/0/12)<---phone ( fc:fb:fb:10:83:77) <------pc ( a4:5d:36:58:15:c4)) ,  VLAN_102 vlan data  VLAN_52 vlan VOIP, then logically, When, i do show interface ge-2/0/12, i'll see normally:

  VLAN              MAC address       Type         Age Interfaces
  VLAN_102          *                 Flood          - All-members
  VLAN_102          a4:5d:36:58:15:c4 Learn          0 ge-2/0/12.0
  VLAN_52           *                 Flood          - All-members
  VLAN_52           fc:fb:fb:10:83:77 Learn         54 ge-2/0/12.0

But not i see this, when i do run show ethernet-switching table interface ge-2/0/12

  VLAN              MAC address       Type         Age Interfaces
  VLAN_102          *                 Flood          - All-members
  VLAN_102          a4:5d:36:58:15:c4 Learn          0 ge-2/0/12.0
  VLAN_102          fc:fb:fb:10:83:77 Learn          0 ge-2/0/12.0  the problem is here ???
  VLAN_52           *                 Flood          - All-members
  VLAN_52           fc:fb:fb:10:83:77 Learn         54 ge-2/0/12.0

On switch CISCO i not have this problem.

as I have two devices bay port, i will do limitation of max on port :

secure-access-port {
    interface IT_PC_Phone_Integration {
        mac-limit 2 action drop;
        no-dhcp-trusted;
    }}

But i can't,

secure-access-port {
    interface IT_PC_Phone_Integration {
        mac-limit 3 action drop;
        no-dhcp-trusted;
    }}

I have to set the value  mac-limit  of to 3 to make it work. but i have juste 2 devices  !!!

And it's all because, the mac of phone appears on vlan data et vlan of phone?

and I do not know why?

Thanks for your help

I've seen this in the past as well on others that posted on J-NET. I saw this in the lab as well.

Based on other feedback, it seems that some of the phones type/brands are triggering this behavior(3 MACs), while others do not trigger this behavior(2 MACs).

In case you do not want to open a JTAC case, then I suggest you to go ahead and set a limit of three devices.

=====

If this worked for you please flag my post as an "Accepted Solution" so others can benefit. A kudo would be cool if you think I earned it.

thansk 🙂