03-11-2016 01:35 AM - edited 03-05-2019 03:32 AM
We have 2960x switch (WS-C2960X-48LPS-L 15.0(2)EX4 C2960X-UNIVERSALK9-M) and have configured on access ports port-security, ip source guard (IPSG) and also DAI and DHCP snooping enabled globaly on switch. The problem is that when we configure the IPSG with mac check the port security is not working and not sending alarm messages to syslog server. So when we use on port:
ip verify source port-security
port- security is not working. But when we use:
ip verify source
on port all is working properlly (IPSG checks only IP but not mac).
Is it a bug or some our misconfiguration?
03-20-2016 07:26 PM
Can you also post your logging and snmp configuration settings?
Also, the output of show logging
Thank you for rating helpful posts!
03-21-2016 12:52 AM
Our current config
Our current snmp-server is disabled and maybe in case of comand "ip verify source port-security" switch sends alerts to snmp server but it cannot be reach. But actually it would be strange...
Logging:
logging trap debugging
logging host 192.168.XXX.XXX
SNMP:
snmp-server community XXXXX RO XXXXXXX
snmp-server trap link ietf
snmp-server trap-source VlanXXX
snmp-server source-interface informs VlanXXX
snmp-server enable traps mac-notification change move threshold
snmp-server host XXXXXX XXXXXXXX
show logging:
No Active Message Discriminator.
No Inactive Message Discriminator.
Console logging: disabled
Monitor logging: disabled
Buffer logging: level debugging, 14963547 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
File logging: disabled
Persistent logging: disabled
No active filter modules.
Trap logging: level debugging, 14517775 message lines logged
Logging to XXXXXXXXX (udp port 514, audit disabled,
link up),
14517733 message lines logged,
0 message lines rate-limited,
0 message lines dropped-by-MD,
xml disabled, sequence number disabled
filtering disabled
Logging Source-Interface: VRF Name:
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide