cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
989
Views
3
Helpful
11
Replies

Can't Pull Switch Port out of Shutdown

adrake
Level 1
Level 1

#show version
Cisco IOS XE Software, Version 17.09.04a
Cisco IOS Software [Cupertino], Catalyst L3 Switch Software (CAT9K_LITE_IOSXE), Version 17.9.4a, RELEASE SOFTWARE (fc3)

show port-security interface Gi2/0/48
Port Security : Enabled
Port Status : Secure-shutdown
Violation Mode : Shutdown
Aging Time : 0 mins
Aging Type : Absolute
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 0
Configured MAC Addresses : 0
Sticky MAC Addresses : 0
Last Source Address:Vlan : accc.8efe.3f77:1
Security Violation Count : 3

I've tried to do reset it multiple times by setting it to defaults and doing shutdown/no shutdown, but I'm at a loss here. It won't get out of Shutdown.

(config)#interface Gi2/0/48
(config-if)#no switchport port-security
(config-if)#no shutdown
(config-if)#default interface Gi2/0/48
Interface GigabitEthernet2/0/48 set to default configuration
(config)#end

#write memory

11 Replies 11

@adrake 

show interface Gi2/0/48 status

Port             Name          Status                  Vlan                Duplex                        Speed             Type
Gi2/0/48                         connected           trunk                a-full                         a-1000            10/100/100

the interface is fine. What is the issue? 

Are you referring to this "Violation Mode : Shutdown"?

You can change this 

switchport port-security violation {protect | restrict | shutdown | shutdown vlan}

 

I'm not entirely sure what happened, but I assumed the Port Status : Secure-shutdown and Violation Mode : Shutdown were issues as, when we moved that port it entirely broke.

However, now things seem to be working again and I'm not sure if it was a timing issue for what MHM gave me. Should I not be concerned that these are in Shutdown though?

Yes, there is a timing related and yes, you dont need to worry about the shutdown. This means that if there were a violation, the port will be put in showdown to protect the network. But, only if there were violation.

Otherwise, it will works as expected.

Gotcha, thank you so much for your help!

Do below 

1- shut 

2- remove the port secuirty 

3- no shut 

MHM

Unfortunately that didn't resolve it. Show interface status is the same.

#show port-security interface Gi2/0/48
Port Security : Disabled
Port Status : Secure-down
Violation Mode : Shutdown
Aging Time : 0 mins
Aging Type : Absolute
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 0
Configured MAC Addresses : 0
Sticky MAC Addresses : 0
Last Source Address:Vlan : 54b2.038d.25a6:1
Security Violation Count : 3

Show interface g2/0/48

It must be UP now

MHM

It is. Thank you so much for your help!

you are so welcome 

I will send you PM for remove secure-shut after I check something in my lab.

Thanks 

MHM