I have a few ports with a phone + computer connected. These ports have port security enabled, with a mac limit of 2, and sticky MAC. I've noticed that the computer MAC is stickied, but the phone is not. The sticky database shows only the computer and, the MACs learned on the port indicate the computer is stickied:
#show mac-address-table interface gigabitethernet 1/0/17
Total MAC address: 2
Learnt: 0, Static: 0, Auth: 0, Phone: 1, Sticky: 1 Blacklisted: 0
MAC Address Table
-----------------
Destination Address Address Type VLAN Destination Port
------------------- ------------ ---- ----------------
xx:xx:xx:xx:xx:xx Phone xxx GE1/0/17
xx:xx:xx:xx:xx:xx Sticky xxx GE1/0/17
Is this normal? My concern is that someone could plug in an unmanaged switch and connect two computers since the phone isn't stickied.