07-14-2021 07:23 PM - edited 07-14-2021 08:09 PM
Hi There,
I have a network for a plant - SCADA network, we use about 10 SW for this network and now the plant system was tripe in some time. we not sure what is the problem but when checking log in one SW we suspect, I found port 0/15 show log as bellow, can you advise me it's a root cause for our network flapping ? - thanks
Log Buffer (4096 bytes):
dress 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:36:31.136: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:36:36.773: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:36:41.990: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:36:52.131: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:36:59.119: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:04.697: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:12.003: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:22.127: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:27.135: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:32.134: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:37.780: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:43.760: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:49.070: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:37:54.145: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:38:01.141: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:38:06.752: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:38:11.995: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:38:21.767: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:38:31.128: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:38:36.757: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bc64.7a1b on port GigabitEthernet0/15.
Jul 15 00:40:47.402: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/14, changed state to down
Jul 15 00:40:48.400: %LINK-3-UPDOWN: Interface GigabitEthernet0/14, changed state to down
Jul 15 00:41:20.728: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/14, changed state to up
Jul 15 00:41:22.640: %LINK-3-UPDOWN: Interface GigabitEthernet0/14, changed state to up
Jul 15 00:48:56.523: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bcc5.3471 on port GigabitEthernet0/15.
Jul 15 00:58:59.487: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bcc5.3471 on port GigabitEthernet0/15.
Jul 15 01:11:41.943: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bcc5.3471 on port GigabitEthernet0/15.
Jul 15 01:31:41.773: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 0000.bcc5.3471 on port GigabitEthernet0/15.
# show port configure
interface GigabitEthernet0/15
description PLC vlan 602
switchport access vlan 602
switchport mode access
switchport port-security
switchport port-security aging time 2
switchport port-security violation restrict
switchport port-security aging type inactivity
macro description cisco-desktop
spanning-tree portfast
spanning-tree bpduguard enable
07-14-2021 11:55 PM
- For that particular port-configuration you can only have one mac address on or behind the port , hence those messages will get logged if that condition is not met.
M.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide