Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

3850 Port-Securty Aging-Time Issue

Hello,

we have configured Port-Security on the Cisco Catalyst 3850 Switches on all "access ports" like this:

interface GigabitEthernet1/0/1
 switchport mode trunk
 switchport nonegotiate
 switchport port-security
 switchport port-security maximum 50
 switchport port-security aging time 2
 switchport port-security violation restrict
 switchport port-security aging type inactivity

 

  1. I connect my PC to a mini switche and connect this to the first 3850. Everything is working.
  2. Then I connect my PC to the second 3850 -> there is no connection. This is ok because of the aging time of 2 Minutes.
  3. Then I connect my PC to the third 3850 behind a telephone everything is working.
  4. After 5 to 10 Minutes I type "show mac address-table address x.x.x" on switch 1 and 3.

Switch1#sh mac address-table address ecf4.bb01.078b

          Mac Address Table

-------------------------------------------

Vlan    Mac Address       Type        Ports

----    -----------       --------    -----

2201    ecf4.bb01.078b    STATIC      Gi3/0/31

Total Mac Addresses for this criterion: 1

 

Switch3#sh mac address-table address ecf4.bb01.078b

          Mac Address Table

-------------------------------------------

Vlan    Mac Address       Type        Ports

----    -----------       --------    -----

2201    ecf4.bb01.078b    STATIC      Gi6/0/24

Total Mac Addresses for this criterion: 1

 

My MAC-Address isn't aging out. And this means I can't connect to any other Port.

After clearing port-security "clear port-security dynamic addressecf4.bb01.078b" everything is fine.

 

Everyone's tags (1)
2 REPLIES

I don't think the aging

I don't think the aging timeout works between switches, I believe its only applicable to one switch at a time.

Thanks for your reply.Why

Thanks for your reply.

Why shouldn't it work? If I disconnect my PC I have no activity so my mac address should age out.

So if I want to plug it in to another port after the aging time of 2 Minutes my MAC-Address will be learned and I have network connectivity. That's the plan... otherwise I will be locked out.

196
Views
0
Helpful
2
Replies