cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
549
Views
0
Helpful
1
Replies

Allowing a device blocked by port-security

red red
Level 1
Level 1

Lets say I have port security configured on a switch's ports like this:

    Secure Port  MaxSecureAddr  CurrentAddr  SecurityViolation  Security Action
                    (Count)       (Count)          (Count)
    ---------------------------------------------------------------------------
          Et0/2              1            1                  0         Shutdown
    ---------------------------------------------------------------------------

And also that I use sticky to allow all connected devices.

Now lets say an admin unplugs the computer that was plugged into a port and plugs in another one. The switch port shutdowns as expected. Now the admin calls and asked that the currently connected computer be allowed access. What is the proper way to allow access to that computer?

I ran sticky again on that specific interface and did a no shut, but it is still shutdown. Do I need to completely disable and re-enable port-security on that interface to allow the new device?

1 Accepted Solution

Accepted Solutions

rafael_ormedo
Level 1
Level 1

Hi,

In the line command, write:

 

switch(conf-if)#shutdown

and

switch#clear port-security dynamic interface XX/XX

and

switch#clear mac address-table dynamic interface XX/XX

and

switch(conf-if)#no shutdown

In the 2 interfaces - old and new interfaces.

 

Thanks.

View solution in original post

1 Reply 1

rafael_ormedo
Level 1
Level 1

Hi,

In the line command, write:

 

switch(conf-if)#shutdown

and

switch#clear port-security dynamic interface XX/XX

and

switch#clear mac address-table dynamic interface XX/XX

and

switch(conf-if)#no shutdown

In the 2 interfaces - old and new interfaces.

 

Thanks.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: