Automatically disable a switchport

[dario.didio]

Hi all,

We have some VoIP phones located in public hallways.

For security reasons, we want the switchport to go into shut or err-disabled once the port goes down; eg when someone disconnects the phone from it's cable.

I assume this could be accomplished by an EEM script, but because the switch is a Cat2960X, EEM is not supported.

Anyone has an alternative idea to accomplish this?

Thanks!

[Leo Laohoo]

---

@dario.didio wrote:

but because the switch is a Cat2960X, EEM is not supported.

---

2960X supports EEM as long as it's loaded with 15.2 firmware.

[dario.didio]

Hi,
according to the feature navigator, it does not support EEM.
Also, when I try to configure it, the CLI doesn't accept the commands.
We're running 15.2.2.E6

[dario.didio]

Apparently it was introduced in 15.2.4E:

Features Introduced in Cisco IOS Release 15.2(4)E
(LAN Base for Catalyst 2960-X switches; IP Lite for Catalyst 2960-XR switches) Support for Embedded Event Manager (EEM).
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-2_4_e/releasenotes/rn-1524e-2960x-xr.html#pgfId-246822

[balaji.bandi]

Dont have 2960 available for me to test, if the EEM not supported you have 2 options.

1. TCL Script should able to do this task, if you are familiar.

2. or any NMS - solarwinds can able to do this task using SNMP based on traps.

[balaji.bandi]

I do not have 2960 available for me to test, if the EEM not supported you have 2 options.

1. TCL Script should able to do this task, if you are familiar.

2. or any NMS - solarwinds can able to do this task using SNMP based on traps.

[Georg Pauwen]

Hello,

on a side note, I guess what you want to accomplish is that random unauthorized people disconnect the phone and connect some other device to the switchport ? If so, you could also just enable port security and statically configure the port with the MAC address of the phone (save the running config to the startup config). The statically configured MAC address will never age out, so no other device than the originally connected phone will ever be able to connect. That has the advantage of not requiring any sort of manual intervention.

2960X(config-if)# switchport port-security mac-address a3cc.09fg.ccf6