Switching

last person joined: yesterday 

Ask questions and share experiences about EX and QFX portfolios and all switching solutions across your data center, campus, and branch locations.

  • 1.  Ex2200 Port Security

    Posted 11-19-2013 01:48

    Hi,

    I'm in process to configure"edit ethernet-switching-options secure-access-port" on a switch Ex2200,

    the commands are:

     

    set interface ge-0/0/1 mac-limit 1 action shutdown
    set interface ge-0/0/1 allowed-mac xx:xx:xx:xx:xx:xx
    set interface ge-0/0/1 persistent-learning

     

    my question, if a security violation occured at any of the configured ports how can i show which interface  had security violation occured?

     

    Thanks



  • 2.  RE: Ex2200 Port Security
    Best Answer

    Posted 11-19-2013 04:14
      |   view attached

    There are two commands to view the port security violation, show log messages and show ethernet-switching interface command, see attachment for reference.

    Now if port is blocked due to port error then clear ethernet-switching port error interface (name of interface)   command will clear the port error and port will be active again

    You can also configure port error autorecovery feature by using command set ethernet-switching-options port-error-disable diabale-timout ------ (time out value in secondes ranging from 10 to 3600)

     

     

    Please mark as accepted solution if it works for you

    A Kudos is a good way of appreciation

     

    Kashif Nawaz

    JNCIP-Sec JNCIS-Sec JNCIS-Ent JNCIA-Junos

     

    Kashif Nawaz

    JNCIP-Sec JNCIS-Sec JNCIS-Ent JNCIA-Junos

    Attachment(s)

    pdf
    port error.pdf   65 KB 1 version