cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4380
Views
0
Helpful
15
Replies

Port status is Secure-down but connected

Raven1314
Level 1
Level 1

Hi,
The Cisco Switch port is secured-down with 1 violation count but the port security is disabled, however the port is still active and connected with green light. I have tried replug in the ethernet cable, shut & no shut and turned the port security on and off.

I'm trying to get the port secure-up again.
Let me know if any more information is needed and any advice would be grateful, Thanks.

#show port-security interface gigabitEthernet 0/4
Port Security : Disabled
Port Status : Secure-down
Violation Mode : Shutdown
Aging Time : 0 mins
Aging Type : Absolute
SecureStatic Address Aging : Disabled
Maximum MAC Addresses : 1
Total MAC Addresses : 0
Configured MAC Addresses : 0
Sticky MAC Addresses : 0
Last Source Address:Vlan : xxxxxx
Security Violation Count : 1

#show int gi0/4 status
Port Name     Status              Vlan               Duplex Speed Type
Gi0/4             connected       xx                 a-full a-1000 10/100/1000Ba

1 Accepted Solution

Accepted Solutions

Hello,

Secure-down means port security is not enabled on the port. If you want to see Secure-Up you will need to enter the "switchport portsecurity" command on the interface.

Can you also "show int <int> switchport"

-David

View solution in original post

15 Replies 15

See comment below 

Hi 
For "show port-security address" I do not see one for that port
I did show a "show mac address-table int gi0/4", the mac address is the same as Last Source Address:Vlan mac address

See comment below

Hi
I did found another port with the same Mac address, so i cleared that and did a shut down and no shut down on Gi/04, it didn't make a difference. I will try unplug the ethernet and clear the address on that port as well

 

See comment below

Edit:
I did the port-security dynamic interface Gi0/4 after shut down then no shut and on show Mac address-table it doesn't show that port any more. Last Source Address:Vlan still have a  mac address, i do need to unplug the cable and then do it?

Can you share port-secuirty mac table for that mac.

As in share show mac address-table content?

Show port-secuirty address 

That what i want to see 

Hello,

Secure-down means port security is not enabled on the port. If you want to see Secure-Up you will need to enter the "switchport portsecurity" command on the interface.

Can you also "show int <int> switchport"

-David

Oh Secure-down means there is not security?!
I've been understand it wrong all this entire time.....
Thank you. Now i know the problem isn't the switch, thank you...

Hi Team 

Please assist I have the same problem port fa0/2 is disable did enable it with switchport port-security 

werytun127444d#conf t

werytun127444d#conf terminal

Enter configuration commands, one per line. End with CNTL/Z.

werytun127444d(config)#int

werytun127444d(config)#interface fa0/2

werytun127444d(config-if)#sw

werytun127444d(config-if)#switchport mo

werytun127444d(config-if)#switchport mode acc

werytun127444d(config-if)#switchport mode access

werytun127444d(config-if)#sw

werytun127444d(config-if)#switchport po

werytun127444d(config-if)#switchport port-security ma

werytun127444d(config-if)#switchport port-security mac

werytun127444d(config-if)#switchport port-security mac-address st

werytun127444d(config-if)#switchport port-security mac-address sticky

werytun127444d(config-if)#sw

werytun127444d(config-if)#switchport po

werytun127444d(config-if)#switchport port-security max

werytun127444d(config-if)#switchport port-security maximum 1

werytun127444d(config-if)#sw

werytun127444d(config-if)#switchport po

werytun127444d(config-if)#switchport port-security vi

werytun127444d(config-if)#switchport port-security violation no sh

werytun127444d(config-if)#switchport port-security violation unshu

werytun127444d(config-if)#switchport port-security violation no shutdown

The Stutas of the port is shows that it down, I want secure- up how can I configure this port

werytun127444d#show por

werytun127444d#show port-security int

werytun127444d#show port-security interface fa0/2

Port Security : Enabled

Port Status : Secure-down

Violation Mode : Shutdown

Aging Time : 0 mins

Aging Type : Absolute

SecureStatic Address Aging : Disabled

Maximum MAC Addresses : 1

Total MAC Addresses : 0

Configured MAC Addresses : 0

Sticky MAC Addresses : 0

Last Source Address:Vlan : 0000.0000.0000:0

Security Violation Count : 0

If the port secuirty is disabled why violate count is increasing!!!!!!

Good luck 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: