07-23-2019 08:31 AM
Hello,
Currently I try to implement configuration with Template interface, but I have some trouble with "ip verify source" :
I want this on my interface :
interface GigabitEthernetX/X/X
switchport access vlan XXX
switchport mode access
switchport nonegotiate
switchport port-security maximum 3
switchport port-security violation restrict
switchport port-security aging time 2
switchport port-security aging type inactivity
switchport port-security
no logging event link-status
storm-control broadcast level 5.00
storm-control multicast level 5.00
storm-control unicast level 5.00
auto qos trust dscp
service-policy input AutoQos-4.0-Trust-Dscp-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
ip verify source
but some commade don't work when I created a "Interface template" like:
auto qos trust dscp
ip verify source
I work with a Cisco 9200 version Cisco IOS XE Software, Version 16.11.01.
Anybody have any idea ?
Best Regards,
07-23-2019 01:48 PM
Hello Saxoflo07,
you can try to use the old approach of interface range instead to configure a group of physical ports in the same manner at once.
Later you can change the access vlan and description as needed.
Hope to help
Giuseppe
07-24-2019 01:28 AM
Yes I did that but I try to minimize the number of configuration line, I already did this :
template ACCESS_SECURITY_TEMPLATE
storm-control broadcast level 5.00
storm-control multicast level 5.00
storm-control unicast level 5.00
switchport nonegotiate
switchport port-security maximum 3
switchport port-security violation restrict
switchport port-security aging time 2
switchport port-security aging type inactivity
switchport port-security
service-policy input AutoQos-4.0-Trust-Dscp-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
exit
template interface USER_VLXXX_TEMPLATE
description Port User
switchport access vlan XXX
switchport mode access
source template ACCESS_SECURITY_TEMPLATE
exit
interface Gi1/0/1
source template USER_VLXXX_TEMPLATE
ip verify source
I have many template, I use some with "ip verify source" and other without this command.
I only want to add one line per interface, anybody have an idea ?
Best Regards,
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide