cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
469
Views
0
Helpful
3
Replies

Unable to remove command from switchport

darren-carr
Level 2
Level 2

Hi guys,

I am unable to remove a command from two of the switchports I have configured as part of an etherchannel (also trunk) to my core switch.

Please see below.

I cannot remove the port-security command

interface GigabitEthernet0/48

description TRUNK to SW001 M3-42 Gig 4/0/42

switchport port-security violation restrict

channel-protocol lacp

channel-group 1 mode active

spanning-tree portfast

spanning-tree link-type point-to-point

end

Any ideas why I cant and how I go about removing it?

Thanks

Darren

3 Replies 3

John Blakley
VIP Alumni
VIP Alumni

Try:

default switchport port-security

See if that works for you.

--John

HTH, John *** Please rate all useful posts ***

It looks like the port-security command was configured before you configured them as members of an EtherChannel. Since port-security isn't compatible with EtherChannel the CLI doesn't accept port-security commands when the port is configured as part of an EtherChannel.

You need to remove the EtherChannel configuration first before it will let you remove the port-security commands. The best way to do this is to shut the physical interfaces down, remove the channel-group command, then remove the switcport port-security command, re-add the channel-group command and then do a no shut.

I have just tested this on a 3550 and I get the same behaviour as you.

HTH

Andy

Hi Andy,

Many thanks for your valuable input and also for those others who have posted.

As this is a production network I will attempt to make this change out of hours.

Appreciate your help and advice as always guys :)

Darren

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: