• shutdown—a port security violation causes the interface to become error-disabled and to shut down
immediately, and the port LED turns off. When a secure port is in the error-disabled state, you can bring
it out of this state by entering the errdisable recovery cause psecure-violation global configuration
command, or you can manually re-enable it by entering the shutdown and no shut down interface
configuration commands. This is the default mode.
• shutdown vlan—Use to set the security violation mode per-VLAN. In this mode, the VLAN is error
disabled instead of the entire port when a violation occurs
This table shows the violation mode and the actions taken when you configure an interface for port security.
Table 34: Security Violation Mode Actions
Shuts down
port
Violation
counter
increments
Displays
error
message
9
Sends syslog
message
Sends SNMP
trap
Traffic is
forwarded
8
Violation
Mode
NoNoNoNoNoNoprotect
NoYesNoYesYesNorestrict
YesYesNoNoNoNoshutdown
No
10
YesNoYesNoNoshutdown
vlan
8
Packets with unknown source addresses are dropped until you remove a sufficient number of secure MAC addresses.
9
The switch returns an error message if you manually configure an address that would cause a security violation.
10
Shuts down only the VLAN on which the violation occurred.
Port Security Aging
You can use port security aging to set the aging time for all secure addresses on a port. Two types of aging
are supported per port:
• Absolute—The secure addresses on the port are deleted after the specified aging time.
• Inactivity—The secure addresses on the port are deleted only if the secure addresses are inactive for the
specified aging time.
Related Topics
Enabling and Configuring Port Security Aging, on page 415
Port Security and Switch Stacks
When a switch joins a stack, the new switch will get the configured secure addresses. All dynamic secure
addresses are downloaded by the new stack member from the other stack members.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
408 OL-29048-01
Configuring Port-Based Traffic Control
Port Security Aging
To Next Page
Loading...
Need help?
General