200-301 ebook

200-301 ebook.The following log message also points to aport security issue. The following log message also points to aport security issue.01:46:58: %PORT_SECURITY-2-PSECURE_VIOLATION:Security violation occurred, caused by MAC address 0200.1111.1111 on port FastEthernetO/11.This example begins with the display of the security mode and violation counters and lists the last MAC address (0200.1111.1111) sent with a frame that entered the connection FaO/11. but the MAC address of PC1 (0200.1111.1111) does not match the port security configuration. as shown in the second part of this example. the port security configuration shows that by default. only one MAC address is allowed by default, and the MAC address has been explicitly configured as 0200.3333.3333.A simple solution is to reconfigure port security for the interface that lists the MAC address of PC1. Note that the administrator does not need to first use the shutdown command on the interface and then use the no shutdown command to restore the interface, because the violation mode is configured to restrict when3.2 Basics 73this configuration puts the interface in the up state when the interface drops messages sent to or from PC1.Finally, the end of this example shows that when restricted mode is used, the switch generates a log message for each violation. This log message can be seen from the console, or a remote user has entered the terminal monitorEXEC command, or the message can be viewed by going to the switch's Telnet or Secure Shell Protocol (SSH) connection.(4) Step 4: Check for VLAN and VLAN trunking problems.Step 4a begins by checking that each access interface is assigned to the correct VLAN. in this example, as shown in Figure 3-5, all interfaces connected to the PC and router should be assigned to VLAN 30 Example 3-12 shows some useful output from the show command. Take a moment to read this example carefully and look for issues related to VLAN assignment.Example 3-12 Checking Access Interface VLAN Assignment