port security

[uwkl]

Hi,

Who could verify for me if I am correct. I been looking through cco and cannot confirm this.

My question is how do I disable user ports on CatOS (5k or 6k) from becoming trunking eligible?

If I turn trunking off "set trunk 5/24 off" still sends out DTP packets - correct?

So do you need to "set trunk 5/24 dot1q nonegotiate" which is the only command I found to disable a port from sending out DTP packets - BUT "nonegotiate" will form a trunk if the other end requests it without DTP!

What is the proper way of doing this?

Thank you in advance.....

Uwe

uwe@sbcglobal.net

[dfelter]

See http://www.cisco.com/warp/customer/473/103.html#dtp

In OFF mode, DTP packets will not be transmitted in steady state. OFF mode is the correct configuration of DTP to prevent a port from becoming a trunk port

[uwkl]

Thank you for your reply!

Uwe