Solved: interface range command, macro command

sarahr202 · ‎10-12-2008

hi every body!

1)Do we need to configure the " interface range fastethernet 0/1, fast ethernet 0/2" first before we can use the command"defineinterface-range zee fastethernet 0/1, fastethernet 0/2" ?

2) switch puts ports in errdisable for different errors. I dont understand the difference between psecure-violation cause and security-violation cause.

My cisco book defines psecure-violation as" detects conditions that trigger port secuiy " and security-violation as" detects errors related to port security".

My understanding is both option serves the same purpose that is port would be put in errdisable state if anything happens against the configured port secuirty . So why do we need two different causes when they both serve the same purpose?

thanks a lot and have a nice weekend!

Edison Ortiz · ‎10-12-2008

1) They are 2 different commands. The interface range command is interactive while the define interface range command is used when creating a macro.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_44_se/command/reference/cli1.html#wp2232919

2) They aren't the same:

psecure-violation

Enable the timer to recover from a port security violation disable state.

security-violation

Enable the timer to recover from an IEEE 802.1x-violation disabled state

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_44_se/command/reference/cli1.html#wp2233388

HTH,

__

Edison.

View solution in original post

Edison Ortiz · ‎10-13-2008

Yes, that's the way it works.

__

Edison.

View solution in original post

Edison Ortiz · ‎10-12-2008

1) They are 2 different commands. The interface range command is interactive while the define interface range command is used when creating a macro.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_44_se/command/reference/cli1.html#wp2232919

2) They aren't the same:

psecure-violation

Enable the timer to recover from a port security violation disable state.

security-violation

Enable the timer to recover from an IEEE 802.1x-violation disabled state

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_44_se/command/reference/cli1.html#wp2233388

HTH,

__

Edison.

sarahr202 · ‎10-13-2008

thanks for your reply Edison! So if I only configure the command :

switch(config)# define interface-range myzee interface fastethernet 0/1, fastethernet 0/2.

Will it suffice?

or Do I still need to configure the command:

switch(config)# interface range fastethernet 0/1, fastethernet 0/2 ?

Edison Ortiz · ‎10-13-2008

If you want to modify switchports and range it on your current CLI session, you use:

switch(config)# interface range fastethernet 0/1, fastethernet 0/2

If you want to define a range so you can use it along with the macro features in the switch (later use), you use:

define interface-range myzee interface fastethernet 0/1, fastethernet 0/2

HTH,

__

Edison.

sarahr202 · ‎10-13-2008

thanks for your reply! Excuse me for being dumb.

I should have worded my question as

Can one use the command only:

switch(config)# define interface-range myzee interface fastethernet 0/1, interface fastethernet 0/2.

then when one has to make configuration, one can use macro as

switch(config)# interface range macro myzee

Edison Ortiz · ‎10-13-2008

Yes, that's the way it works.

__

Edison.