09-29-2014 07:21 AM - edited 03-07-2019 08:55 PM
I have 2 ports on a Cisco 3750 distro switch that are put in an err-disabled state every Sunday. The error is 'security violation occurred, caused by MAC address XXXX. This MAC address is associated with our Juniper core switch, showing up in spanning tree associated to all the layer 3 aggregate ports.
09-29-2014 04:11 PM
Hi,
What event is happening at that time? Is there a switch config backup at that time?
Thanks
John
09-30-2014 04:55 AM
John, that was our original thought, but the backups don't run at that time and no other network event happens. thank you
09-30-2014 04:28 AM
what is plugged into the 2 ports that are going down?
do you have port security, or arp inspection turned on?
09-30-2014 04:54 AM
The 2 ports are connected to user workstations. Port security is active on each port, arp inspection is not.
09-30-2014 04:58 AM
just to give an update. we have noticed that there are other ports on other switches being effected, however, not on a consistant basis. same MAC address, same outcome.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: