cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1345
Views
0
Helpful
1
Replies

%PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.

Hi There,

 

I have a network for a plant - SCADA network, we use about 10 SW for this network and now the plant system was tripe in some time. we not sure what is the problem but when checking log in one SW we suspect, I found port 0/15 show log as bellow, can you advise me it's a root cause for our network flapping ? - thanks 

 

Log Buffer (4096 bytes):
dress 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:36:31.136: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:36:36.773: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:36:41.990: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:36:52.131: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:36:59.119: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:04.697: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:12.003: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:22.127: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:27.135: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:32.134: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:37.780: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:43.760: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:49.070: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:54.145: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:38:01.141: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:38:06.752: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:38:11.995: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:38:21.767: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:38:31.128: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:38:36.757: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:40:47.402: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/14, changed state to down
Jul 15 00:40:48.400: %LINK-3-UPDOWN: Interface GigabitEthernet0/14, changed state to down
Jul 15 00:41:20.728: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/14, changed state to up
Jul 15 00:41:22.640: %LINK-3-UPDOWN: Interface GigabitEthernet0/14, changed state to up
Jul 15 00:48:56.523: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bcc5.3471 on port GigabitEthernet0/15.
Jul 15 00:58:59.487: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bcc5.3471 on port GigabitEthernet0/15.
Jul 15 01:11:41.943: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bcc5.3471 on port GigabitEthernet0/15.
Jul 15 01:31:41.773: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bcc5.3471 on port GigabitEthernet0/15.



# show port configure 

interface GigabitEthernet0/15
description PLC vlan 602
switchport access vlan 602
switchport mode access
switchport port-security
switchport port-security aging time 2
switchport port-security violation restrict
switchport port-security aging type inactivity
macro description cisco-desktop
spanning-tree portfast
spanning-tree bpduguard enable

 

 

1 Reply 1

marce1000
VIP
VIP

 

 - For that particular port-configuration you can only have one mac address on or behind the port , hence those messages will get logged if that condition is not met.

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Review Cisco Networking for a $25 gift card