Switchport Port-Security Violation Shutdown - Email Notification?

[IWilson8]

Hello,

I am looking for a way of being notified by e-mail when an interface enters the shutdown state due to a port-security violation. I have configured a switch with the appropriate port-security commands and receive SNMP traps when consoled onto the device.

Is there any way for CiscoWorks to perform an e-mail notification when one of these events occur?

If not is there any free Syslog utilities or applications which include a free text search that I could use to search for the SNMP trap string and generate an e-mail?

I am guessing this has probably been addressed previously as there is no point shutting down ports automatically if no one is notified about it.

Thanks for any responses

Ian

[Martin Ermel · Accepted solution]

you can enable automatic actions on distinct syslog messages:
RME > Tools > Syslog

generate an automatic action for syslog messages of the following formats (not sure if this are all possibilities)

%PM-4-ERR_DISABLE
%PORT_SECURITY-SP-2-PSECURE_VIOLATION
%PORT_SECURITY-SPSTBY-2-PSECURE_VIOLATION

this is also a good document with important syslog messages:
http://www.cisco.com/en/US/technologies/collateral/tk869/tk769/white_paper_c11-557812.html#wp9000614