Port security on port where printer is connected

[jahanzeb.feroze]

How to handle port security on the ports where printers are connected, the problem is whenever i enable ports security on the ports , everytime printer gets disable. Is there any to appy port secuirty on the port where printer is connected?

Regards

Jahanzeb

[jahanzeb.feroze]

Its a port just in use for printer, no laptop or other equipment connect to it, still receiving err disabld port state

[marc.groenen]

Any update Jahanzeb ?

[Everton de Paula S Pinto]

Jahanzeb,

Do the following:
Before you connect the printer on the network, see the MAC table of the switch and the ARP table of your network Core if the MAC the new printer is learned.
If so, try to locate the interface where the device with this MAC is connected.

Commands that can help

SWITCH # show mac address-table | include 0000.aaaa.bbbb

CORE # show ip arp | include 0000.aaaa.bbbb

CORE # traceroute mac 0000.aaaa.bbbb 0000.aaaa.bbbb

[preeth puliyasseri]

can u give the port configuration details and printer details?

[jahanzeb.feroze]

Configuration:

Int fa 0/x

switchport mode access

switchport access vlan 50

switchport pot-security

speed 100

duplex full

Printer detail,

Xerox printer /copier / scanner

[preeth puliyasseri]

Check the logg.

Make sure that you are mac address is mapped.

U can use sticky cmd for the same.

do a sht and no sht cmd after that.

[jahanzeb.feroze]

Yes, mac is binded

[preeth puliyasseri]

Is that port going to error-disable mode?

[jahanzeb.feroze]

yes

[Everton de Paula S Pinto]

Do not forget that when you enable port-security, some parameters are implicit. See the defaults parametres bellow (For see it, run the command show run all | sec [interface] ):

switchport port-security maximum 1
switchport port-security maximum 65535 vlan
switchport port-security maximum 65535 vlan access
switchport port-security maximum 65535 vlan voice
switchport port-security
switchport port-security aging time 0
switchport port-security violation shutdown
switchport port-security aging type absolute
switchport port-security limit rate invalid-source-mac 10
no switchport port-security mac-address sticky
no switchport port-security aging static

You can see the subject is disabling interface with the following command

switch#show port-security interface fa0/1

[jahanzeb.feroze]

So how to resolve it ?