12-10-2024 09:05 AM
#show version
Cisco IOS XE Software, Version 17.09.04a
Cisco IOS Software [Cupertino], Catalyst L3 Switch Software (CAT9K_LITE_IOSXE), Version 17.9.4a, RELEASE SOFTWARE (fc3)
show port-security interface Gi2/0/48
Port Security : Enabled
Port Status : Secure-shutdown
Violation Mode : Shutdown
Aging Time : 0 mins
Aging Type : Absolute
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 0
Configured MAC Addresses : 0
Sticky MAC Addresses : 0
Last Source Address:Vlan : accc.8efe.3f77:1
Security Violation Count : 3
I've tried to do reset it multiple times by setting it to defaults and doing shutdown/no shutdown, but I'm at a loss here. It won't get out of Shutdown.
(config)#interface Gi2/0/48
(config-if)#no switchport port-security
(config-if)#no shutdown
(config-if)#default interface Gi2/0/48
Interface GigabitEthernet2/0/48 set to default configuration
(config)#end
#write memory
12-10-2024 09:24 AM
show interface Gi2/0/48 status
12-10-2024 09:35 AM
Port Name Status Vlan Duplex Speed Type
Gi2/0/48 connected trunk a-full a-1000 10/100/100
12-10-2024 09:49 AM
the interface is fine. What is the issue?
Are you referring to this "Violation Mode : Shutdown"?
You can change this
switchport port-security violation {protect | restrict | shutdown | shutdown vlan}
12-10-2024 10:18 AM
I'm not entirely sure what happened, but I assumed the Port Status : Secure-shutdown and Violation Mode : Shutdown were issues as, when we moved that port it entirely broke.
However, now things seem to be working again and I'm not sure if it was a timing issue for what MHM gave me. Should I not be concerned that these are in Shutdown though?
12-10-2024 10:24 AM - edited 12-10-2024 10:25 AM
Yes, there is a timing related and yes, you dont need to worry about the shutdown. This means that if there were a violation, the port will be put in showdown to protect the network. But, only if there were violation.
Otherwise, it will works as expected.
12-10-2024 10:32 AM
Gotcha, thank you so much for your help!
12-10-2024 09:41 AM
Do below
1- shut
2- remove the port secuirty
3- no shut
MHM
12-10-2024 09:51 AM
Unfortunately that didn't resolve it. Show interface status is the same.
#show port-security interface Gi2/0/48
Port Security : Disabled
Port Status : Secure-down
Violation Mode : Shutdown
Aging Time : 0 mins
Aging Type : Absolute
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 0
Configured MAC Addresses : 0
Sticky MAC Addresses : 0
Last Source Address:Vlan : 54b2.038d.25a6:1
Security Violation Count : 3
12-10-2024 09:53 AM
Show interface g2/0/48
It must be UP now
MHM
12-10-2024 10:32 AM
It is. Thank you so much for your help!
12-10-2024 10:34 AM
you are so welcome
I will send you PM for remove secure-shut after I check something in my lab.
Thanks
MHM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide