Port security issues on SG350's

[levelupmsp]

Here are the scenarios I've seen.

Problem 1: Plugin a band new device into a switch. We get an IP address but cannot ping/connect to anything. 

Solutions: BDPU Guard got enabled, Port Security got locked, Disabling 802.3 Energy Efficient Ethernet, Delete the affected mac address from the Mac Address table.

Problem 2: Device is plugged into a specific port in the switch. We now move that device to a different port. We get an IP address but cannot ping/connect to anything. 

Solution: Delete the affected mac address from the Mac Address table.

Does anyone know why these issues occur? We are on the latest firmware. Anyone else have these issues?

[paul driver]

Hello

What device are you attaching and what type of port security is applied?

[levelupmsp]

We frequently have these issues with a SG350-52. We typically wouldn't port security features on the switch but we find we have to, to prevent them from being locked out. As of now, this is what we do to mitigate certain issues, yet the settings happen to change on their own again:

1. Disable Energy Efficient Ethernet

2. Enable Link Flap Prevention

3. Disable administrative auto smartport

4. Enable Rapid STP

5. Set BDPU guard to disabled except if the port is uplinked to another switch

6. Port security set to locked > classic lock  > forward

[marce1000]

 - Review this document (and your settings) accordingly : 

           https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-small-business-200-series-managed-switches/smb85-port-security-configuration-on-the-200-300-series-managed-sw.html

 M.

[levelupmsp]

Thanks but reviewing this document isn't helpful. I've already reviewed it previously but maybe the problem is I don't understand what the settings mean or what I'm looking for.

Ultimately, I don't want port security. All I want is the port to NEVER stop forwarding packets. If you can give me the magic combination to do so, I would be greatly appreciative.