Port Security Aging; Port Security And Switch Stacks - Cisco Catalyst 2960-X Security Configuration Manual

Port Security Aging

• shutdown—a port security violation causes the interface to become error-disabled and to shut down
• shutdown vlan—Use to set the security violation mode per-VLAN. In this mode, the VLAN is error
This table shows the violation mode and the actions taken when you configure an interface for port security.
Table 34: Security Violation Mode Actions
Violation
Mode
protect
restrict
shutdown
shutdown
vlan
8 Packets with unknown source addresses are dropped until you remove a sufficient number of secure MAC addresses.
9 The switch returns an error message if you manually configure an address that would cause a security violation.
10 Shuts down only the VLAN on which the violation occurred.
Port Security Aging
You can use port security aging to set the aging time for all secure addresses on a port. Two types of aging
are supported per port:
• Absolute—The secure addresses on the port are deleted after the specified aging time.
• Inactivity—The secure addresses on the port are deleted only if the secure addresses are inactive for the
Related Topics
Enabling and Configuring Port Security Aging, on page 415

Port Security and Switch Stacks

When a switch joins a stack, the new switch will get the configured secure addresses. All dynamic secure
addresses are downloaded by the new stack member from the other stack members.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
408
immediately, and the port LED turns off. When a secure port is in the error-disabled state, you can bring
it out of this state by entering the errdisable recovery cause psecure-violation global configuration
command, or you can manually re-enable it by entering the shutdown and no shut down interface
configuration commands. This is the default mode.
disabled instead of the entire port when a violation occurs
Traffic is Sends SNMP
forwarded trap
8
No No
No Yes
No No
No No
specified aging time.
Configuring Port-Based Traffic Control
Sends syslog Displays
message error
message
9
No No
Yes No
No No
Yes No
Violation Shuts down
counter port
increments
No No
Yes No
Yes Yes
Yes No
10
OL-29048-01