cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
45256
Views
11
Helpful
36
Replies

Clearing Port-security sticky mac address on port

droidus
Level 1
Level 1

I am trying to clear a mac from a port.  Here is what it looks like from the running config:

interface GigabitEthernet5/0/7
switchport mode access
switchport port-security mac-address sticky
switchport port-security

sh interfaces status err-disabled returns:

Gi5/0/7                      err-disabled psecure-violation

If there is a violation, shouldn't there be a MAC address listed with the port in the running config?  How do I resolve this so I can allow my client to connect? 

36 Replies 36

is that works as expected? we take all good here? - the post bit confused with replies jumbled.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

yes

 

.,

I tried this.  When I do the show port-security interface g5/0/7, it shows the mac of the device I connected, yet it gets shutdown.  What does this mean?  The only thing I can think of is that it has more than one mac address...

this what i have explained on the other port - you need to clear and follow the post above for instructions.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

..

...

...

It's only showing one mac, which is the one I want to connect:

show port-security interface gigabitEthernet 5/0/7
Port Security              : Enabled
Port Status                : Secure-up
Violation Mode             : Restrict
Aging Time                 : 0 mins
Aging Type                 : Absolute
SecureStatic Address Aging : Disabled
Maximum MAC Addresses      : 1
Total MAC Addresses        : 0
Configured MAC Addresses   : 0
Sticky MAC Addresses       : 0
Last Source Address:Vlan   : <mac>
Security Violation Count   : 401

...

Running show port-security interface gi5/0/7 address returns no mac addresses. Yet, my device can't pull an IP.  

...

The port still gets shut down.

 

Secure Mac Address Table
-----------------------------------------------------------------------------
Vlan Mac Address Type Ports Remaining Age
(mins)
---- ----------- ---- ----- -------------
1 78 SecureSticky Gi5/0/3 -
1 0d SecureSticky Gi5/0/4 -
1 a2 SecureSticky Gi5/0/5 -
1 c1 SecureSticky Gi5/0/6 -
-----------------------------------------------------------------------------
Total Addresses in System (excluding one mac per port) : 0
Max Addresses limit in System (excluding one mac per port) : 6144

So you don't see any where mac address in show port-security address?
are you config DHCP snooping ?

I saw the mac on port 6, and ran these commands:

  • no switchport port-security maximum

  • no  switchport port-security mac-address sticky

  • no switchport port-security

and now it looks like my port can finally connect!  So I can't have more than one port with the same mac address?