Problem with Port Security on Catalyst 6513

SergeyMironov — Fri, 21 Feb 2020 12:41:57 GMT

Hello!

I have such problem.

Members (№ 1 and № 2) are connected to different switches. At the beginning of the day the user number 2 turned on his computer before user number 1 and for some reason received from the DHCP IP-address of the first user. After that, the users 1 port went to the error-disable state. Shutdown and no shotdown the port fails, the port immediately become error-disable. The problem disappeared only after manually updating the IP to the user's PC number 1 and the off / on the port. User number 2 worked fine all this time. Why can occur port security operation at the mac-address of another port?

Log:

09:07:58: %PM-SP-4-ERR_DISABLE: psecure-violation error detected on Gi4/9, putting Gi4/9 in err-disable state

09:07:58: %PORT_SECURITY-SP-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 6cf0.4927.aba1 on port GigabitEthernet4/9.

09:07:58: %PM-SPSTBY-4-ERR_DISABLE: psecure-violation error detected on Gi4/9, putting Gi4/9 in err-disable state

Ports configuration:

№1:

interface GigabitEthernet4/9

switchport

switchport access vlan 2

switchport mode access

switchport port-security

switchport port-security mac-address sticky

switchport port-security mac-address sticky 4437.e655.e571

speed 100

duplex full

no snmp trap link-status

end

№2:

interface GigabitEthernet5/2

switchport

switchport access vlan 2

switchport mode access

switchport port-security

switchport port-security mac-address sticky

switchport port-security mac-address sticky 6cf0.4927.aba1

speed 100

duplex full

no snmp trap link-status

Thank you for help!

Problem with Port Security on Catalyst 6513

Ramraj Sivagnanam Sivajanam — Sun, 19 Aug 2012 23:44:45 GMT

Hi Bro

I suspect you’ve configuration in your switch that wrongly binds a MAC Address to IP Address under your DHCP settings.

//This should be the correct configuration;

ip dhcp pool User1

host 10.208.11.10 255.255.254.0

client-identifier 0144.37e6.55e5.71

client-name User1

ip dhcp pool User2

host 10.208.11.20 255.255.254.0

client-identifier 016c.f049.27ab.a1

client-name User2

P/S: If you think this comment is useful, please do rate them nicely 🙂

topic Problem with Port Security on Catalyst 6513 in Network Security

Problem with Port Security on Catalyst 6513

Problem with Port Security on Catalyst 6513