topic Hello Jon- in Network Security

Disable Ports after a Period of Inactivity

jon.baxter1 — Fri, 21 Feb 2020 13:58:27 GMT

I would like to enable a port, and if there is no activity for a 12 hour period on that port, i would like it to be disabled.

I have looked at aging port security, but that I don't see it. I want to stay away from sticky mac's, its too much overhead. Can anyone point me in the right direction, aging only clears mac addresses, whether its absolute or inactive. I want to disable the port, shut it down. Any insight is greatly appreciated

Hello Jon-

nspasov — Wed, 07 Dec 2016 18:47:36 GMT

Hello Jon-

Yes, you can do this though EEM/TCL script. Here is a good link that walks you through the EEM feature:

http://www.cisco.com/en/US/docs/ios/12_4t/netmgmt/configuration/guide/t_eemt.html

Here is also another thread that a user had already done this before:

https://supportforums.cisco.com/discussion/12733086/eemtcl-disable-inactive-ports

I hope this helps!

Thank you for rating helpful posts!

This looks good.

jon.baxter1 — Thu, 08 Dec 2016 11:55:23 GMT

This looks good. unfortunately i have catalyst 2960 switches running on ios 12.2(55)SE5

This version of the ios supports eem, but only for the 3750 and 3560 switches, not the 2960 switches. i am going to try anyways. thank you very much...

so i didnt get very far. based on the link you sent describing tcl and emm, i should be able to run the command 'show event manager environment' but i cannot. event manager environment does not exist.

here, on the release notes for this ios is where i found that the 2960 does not support emm but the 3750 and 3560 does http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_55_se/release/notes/OL23054.html