Latest stable IOS for Cisco 3750X and 3850 switches

[q-le]

Hi All,

We have several Cisco 3750X-48P running (12.2(55)SE9 C3750E-UNIVERSALK9-M) and

C3850-48P running (03.06.05E  cat3k_caa-universalk9 INSTALL)

Recently we replace HP desktop with Dell desktop and experience "psecure-violation errors" flooding

We had try everything and hopefully a new IOS upgrade will fix this problem

Any recommended stable IOS is much appreciated.

Thanks

Peter  

[Leo Laohoo]

For 3750X, stick with 12.2(55)SE train and use the latest one.

[MUHAMMAD TAYYAB MUNIR · Accepted solution]

@q-le

The error is port transitions to error-disable state due to port security violations, A port security violation occurs when an address learned or configured on one secure interface is seen on another secure interface in the same VLAN.

Port security violation happened due to MAC address is change after replacing the server. 

1. Use dynamic learning for port security, and remove any static MAC address list or sticky learning configuration.

   SW1-3750(config-if)#no switchport port-security mac-address sticky
   SW1-3750(config-if)#no switchport port-security mac-address H.H.H
   
   
   !--- H.H.H is the 48 bit MAC addresses configured
   
   

2. Configure port security aging.

   The aging time determines the minimum time interval required before the MAC address may appear on a different port.

   SW1-3750(config-if)#switchport port-security aging time 1
   
   SW1-3750(config-if)#switchport port-security aging type inactivity
   

   The aging type inactivity ages out the secure addresses on this port only if there is no data traffic from the secure source addresses for the specified time period.

3. Configure err-disable state recovery from port security violation.

   SW1-3750(config)#errdisable recovery cause psecure-violation
   

https://www.cisco.com/c/en/us/support/docs/switches/catalyst-3750-series-switches/77805-troubleshoot-3750.html

If you really wants to upgrade your switch use 12.2(55)SE12 for 3750 (C3750E-UNIVERSALK9-M), and  03.06.08E  (cat3k_caa-universalk9) for 3850.

BR

tayyabmunir.com