Hi There
What the guys said is correct yes. But some more info won't hurt
You can have your PC and your IP phone use the same port on the switch yes.
You can have your IP phone IP range on a complete different range than your PC IP range yes.
You need to create a VLAN for each network ( VLAN for PC and VLAN for IP Phone)
You need to create a 3rd VLAN called a mobile VLAN yes, add authentication support and 802.1x support.
Below some command to help you
vlan 2 enable name "802.1x Data"
vlan 2 authentication enable
Define which ports on the switch you want in this VLAN etc
vlan 2 port default 1/1
vlan 2 port default 1/2
vlan 3 enable name "IP PHONES"
create mobile VLANS
vlan 111 enable name "Default VLAN mobile ports"
vlan 111 port default 1/1
vlan 111 port default 1/2
Then configure options on VLAN ports
vlan port mobile 1/1 bpdu ignore enable
vlan port 1/1 default vlan disable
vlan port 1/1 802.1x enable
vlan port mobile 1/2 bpdu ignore enable
vlan port 1/2 default vlan disable
vlan port 1/2 802.1x enable
Then if you have MAC range for IP PHONES
vlan 3 mac range 00:80:9f:00:00:00 00:80:9f:ff:ff:ff
Then create layer 3 VLAN
ip interface "802.1x Data" address 192.168.1.0 mask 255.255.255.0 vlan 2
ip interface "IP Phones" address 192.168.2.02 mask 255.255.255.0 vlan 3
Then set some more options on the ports
802.1x 1/1 direction both port-control auto quiet-period 60 tx-period 30 supp-timeout 30 server-timeout 30 max-req 2 re-authperiod 3600 reauthentication
802.1x 1/1 captive-portal session-limit 12 retry-count 3
802.1x 1/1 supp-polling retry 2
802.1x 1/1 supplicant policy authentication pass group-mobility default-vlan fail vlan 111 block
802.1x 1/1 non-supplicant policy authentication pass block fail group-mobility vlan 111 block
802.1x 1/1 captive-portal policy authentication pass default-vlan fail block
802.1x 1/2 direction both port-control auto quiet-period 60 tx-period 30 supp-timeout 30 server-timeout 30 max-req 2 re-authperiod 3600 reauthentication
802.1x 1/2 captive-portal session-limit 12 retry-count 3
802.1x 1/2 supp-polling retry 2
802.1x 1/2 supplicant policy authentication pass group-mobility default-vlan fail vlan 111 block
802.1x 1/2 non-supplicant policy authentication pass block fail group-mobility vlan 111 block
802.1x 1/2 captive-portal policy authentication pass default-vlan fail block
Then trust QOS on the ports
qos port 1/1 trusted
qos port 1/2 trusted
And if you need LAN power, I thought I would add the commands as well
lanpower 1/1 power 7000
lanpower 1/2 power 7000
lanpower start 1
Hoped it helped