port security and hubs

[Andy White]

Hello,

I have a switch were I have added the following to the user ports:

errdisable recovery cause psecure-violation

errdisable recovery interval 60

interface fa x/x

switchport mode access

switchport port-security

spanning-tree portfast

spanning-tree bpduguard enable

On the hub port which has 7 ports (1 for uplink)

switchport mode access

switchport port-security

spanning-tree portfast

switchport port-fast maximum 7

spanning-tree bpduguard enable

Now a user took her laptop from the hub and moved to a port of the switch and the port went into err-disabled, how can I guess the mac-address of the her laptop stays inthe mac address table for 5 mins, what options do I have?  I need user to "roam" but also keep security as i don't want someone flooding ht CAM table with bogus mac addresses.

Thanks

[cflory]

I'm assuming 'switchport port-fast maximum 7' is a mistype?  Because that command doesn't exist, and could be your problem if you tried to enter it.

If it is, what does the output of 'show port-security interface ' give you, as far as Maximum MAC Addresses?

[aras.sepehri]

If traffic with a secure MAC address that is configured or learned on one secure port attempts to access another secure port in the same VLAN, the switch will apply the configured violation mode

You can use aging type and aging time to clear  [inactive] learned addresses from a port.

Switch(config-if)# switchport port-security aging time 5
Switch(config-if)# switchport port-security aging type inactivity

[Andy White]

Hello,

That command does exist:

switchport port-security maximum ?

  <1-6144>  Maximum addresses

Means I could have an 8 port hub plugged into a port but lock it down to 8 mac addresses fromt hat port, or have I missed something?

[cflory]

Agreed, that command works, but that's not what you originally posted:

switchport port-fast maximum 7

[Andy White]

I see what you mean, don't know how that happened, my apologies.