An incorrect switchport mode configuration causes the inability to configure port security on a switch in the Catalyst 2950 or 3550 series.
A port on a Catalyst 2950 or 3550 model must first be configured as an access port in order to configure port security. Set the interface mode as access by issuing the interface configuration switchport modeaccess command. An interface in the default mode (dynamic desirable) cannot be configured as a secure port.
These are some other guidelines for configuring port security:
Port security can only be configured on static access ports.
A secure port cannot be a dynamic access port or a trunk port.
A secure port cannot be a destination port for Switch Port Analyzer (SPAN).
A secure port cannot belong to an EtherChannel port group.
A secure port cannot be an 802.1X port.
You cannot configure static secure MAC addresses in the voice VLAN.
When you enable port security on a voice VLAN port, you must set the maximum allowed secure addresses on the port to at least two. When the port is connected to a Cisco IP phone, the IP phone requires two MAC addresses: one for the access VLAN and the other for the voice VLAN. Connecting a PC to the IP phone requires additional MAC addresses.
When port security is enabled on a port, the secure addresses on the port are deleted only if they are inactive for the specified aging time.You can issue the port security aging or switchport port-security aging time command to set the aging time for all dynamic and static secure addresses on a port.
WS-C3850-12X48U 16.09.06Getting below errors. Before changing out the stacking cable the up/down between the two switches would eventually drop the Access ports on the switch. how do I determine which switches stack port is bad? 13:35:47....
Hi All, I have an ASR 903 that I am running 16.12.5 on and I only have logs showing that the port-channel has a member taken out and then added back. It is a two-port port-channel (20Gbps LAG). There is no min-links config on the port-channel. &...
All, I have a switch that has the correct IOS image and its brand new from the box. It booted properly and I unplugged it, racked it and it goes into ROMMON. When I initiate the boot flash:packages.conf command it boots properly but when I...
When i use NTP broadcast mode with a datadiode in between, the client will not sync the time because of a initial volley back to the server. This means that the broadcast client is operating in normal client mode to exchanges packets with the server. It's...