interface range command, macro command

Answered Question
Oct 12th, 2008

hi every body!

1)Do we need to configure the " interface range fastethernet 0/1, fast ethernet 0/2" first before we can use the command"defineinterface-range zee fastethernet 0/1, fastethernet 0/2" ?

2) switch puts ports in errdisable for different errors. I dont understand the difference between psecure-violation cause and security-violation cause.

My cisco book defines psecure-violation as" detects conditions that trigger port secuiy " and security-violation as" detects errors related to port security".

My understanding is both option serves the same purpose that is port would be put in errdisable state if anything happens against the configured port secuirty . So why do we need two different causes when they both serve the same purpose?

thanks a lot and have a nice weekend!

I have this problem too.
0 votes
Correct Answer by Edison Ortiz about 8 years 1 month ago

Yes, that's the way it works.

__

Edison.

Correct Answer by Edison Ortiz about 8 years 1 month ago

1) They are 2 different commands. The interface range command is interactive while the define interface range command is used when creating a macro.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_44_se/command/reference/cli1.html#wp2232919

2) They aren't the same:

psecure-violation

Enable the timer to recover from a port security violation disable state.

security-violation

Enable the timer to recover from an IEEE 802.1x-violation disabled state

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_44_se/command/reference/cli1.html#wp2233388

HTH,

__

Edison.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Correct Answer
Edison Ortiz Sun, 10/12/2008 - 16:26

1) They are 2 different commands. The interface range command is interactive while the define interface range command is used when creating a macro.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_44_se/command/reference/cli1.html#wp2232919

2) They aren't the same:

psecure-violation

Enable the timer to recover from a port security violation disable state.

security-violation

Enable the timer to recover from an IEEE 802.1x-violation disabled state

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_44_se/command/reference/cli1.html#wp2233388

HTH,

__

Edison.

sarahr202 Mon, 10/13/2008 - 08:14

thanks for your reply Edison! So if I only configure the command :

switch(config)# define interface-range myzee interface fastethernet 0/1, fastethernet 0/2.

Will it suffice?

or Do I still need to configure the command:

switch(config)# interface range fastethernet 0/1, fastethernet 0/2 ?

Edison Ortiz Mon, 10/13/2008 - 08:38

If you want to modify switchports and range it on your current CLI session, you use:

switch(config)# interface range fastethernet 0/1, fastethernet 0/2

If you want to define a range so you can use it along with the macro features in the switch (later use), you use:

define interface-range myzee interface fastethernet 0/1, fastethernet 0/2

HTH,

__

Edison.

sarahr202 Mon, 10/13/2008 - 11:18

thanks for your reply! Excuse me for being dumb.

I should have worded my question as

Can one use the command only:

switch(config)# define interface-range myzee interface fastethernet 0/1, interface fastethernet 0/2.

then when one has to make configuration, one can use macro as

switch(config)# interface range macro myzee

Actions

This Discussion