You can execute the following clear command to clear the log/drop/shutdown errors on an interface: (host) #show port-error-recovery untrusted Clearing Log/Drop/Shutdown Errors on Interface To verify, execute the following show command: You can verify if the configured action is enforced when the number of MAC addresses exceeds the configured MAC limit on untrusted port. (host) (gigabitethernet "//") #aaa-profile Verifying Enforced Action on MAC Limit Exceed (host) (config) #interface gigabitethernet // You can enable and configure the MAC limit on an AAA profile and link the profile to a gigabit ethernet interface, vlan-profile, or interface-group profile. The MAC address count on a port goes below the configured MAC limit due to user entry deletion. The linking of AAA profile is removed from the gigabitethernet, vlan-profile, or interface-group profile. The port is changed from untrusted to trusted type.
The port error recovery is cleared during the following events:
The auto-recovery timer applies only when you have configured the shutdown action. The preceding command enables the MAC limit option, includes the number of MAC addresses that can be allowed on an untrusted port, and the action to take when the number of MAC addresses exceeds the configured limit.įor, the default value is 0, which means no auto-recovery the allowed range of values (in seconds) is 0–65535. (host)(config)# interface-profile port-security-profile Configure the RA guard as part of the port level security configuration and attach to the interface. Guard functionality can be enabled at the port level. The RA messages are sent by the routers in the network when the hosts send multicast router solicitation to the multicast address of all routers. This profile can be attached to the interface. The port security functionality will be configured as part of the port level security configuration. Configuring Port Security Functionality Configuring Port Security Functionality
0 kommentar(er)
