On a Stratix 5700 series switch running IOS 15.2(7)E, under the fast ethernet interfaces we enter the following port-security stanzas:
switchport port-security
switchport port-security maximum 50
switchport port-security violation restrict
switchport port-security aging type inactivity
Saving the config and then looking at the output from both show run & show start, the "switchport port-security violation restrict" stanza does not show up. However, if we do a show port-security command on any of the interfaces of interest, the "Violation Mode" setting indicates "Restrict".
I could understand this behavior if the default violation mode was Restrict, but based on all the documentation I've seen, the default is "shutdown", so I would expect to see it in the running & startup config files.
