05-16-2017 04:37 AM - edited 03-08-2019 10:36 AM
Hello, I have configured port security on each port with mac-address sticky.
Many ports are in the err-disabled state because they are detecting a mac-address security violation.
I'm sure the mac-address detected are not connected to those ports
What could be happening?
Thanks
05-16-2017 04:50 AM
If a mac address is learned on a port that has mac-address sticky configured and then if you move that machine to another port on the same switch without clearing its mac address from the previous port it can go to err-disable state.
The other thing you can check is the limit how many mac addresses can be learned on the port that has port security configured before security violation policy is triggered, I think by default it's 1 and can be raised.
05-16-2017 04:50 AM
I'm not moving any machine
I limit to one mac per port
The mistery is the swtich is dectecting on port 4 the mac from port 6, so is blocking port 4
05-16-2017 05:01 AM
Can you run following commands on port 4:
show port-security interface x
show port-security address xxxxx (replace x with mac of devices that's connected to port 6)
also clear the sticky mac addresses from both port 4 and 6, that should fix the issue
05-16-2017 05:20 AM
I fix the problem clearing the sticky mac address.
But some time later I have the same problem
05-16-2017 05:43 AM
Please share port security configuration from both ports and also any logs related to port security violation. Do you have user desktops connected to these ports?
Output from this command as well:
show port-security interface x (port 4 and 6)
11-13-2018 01:23 AM
11-13-2018 05:41 AM
Hello
Post the port-security configuration of you switch(s) please
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide