HSRP + Port Security

From: Rajakumar Ramasamy (crrajakumar@gmail.com)
Date: Sun May 04 2008 - 18:44:58 ART


Hello,

I know the following methods to enable port-security on interfaces, which
are connected to routers where HSRP is configured.

Options 1:

switchport port-security

switchport port-security maximum 2

Option 2

Standby use-bia

switchport port-security

switchport port-security maximum 1

However instead of using the above options, I am trying the following since
my requirement is to retain the mac addresses when a switch reloads. I get
duplicate mac-address error message on the switch interface where Passive
router is connected.

SW1

switchport port-security

switchport port-security maximum 2

switchport port-security mac-address <Active router MAC>

switchport port-security mac-address <Virtual mac-address>

SW2

switchport port-security

switchport port-security maximum 2

switchport port-security mac-address <Passive router MAC>

switchport port-security mac-address <Virtual mac-address>

Duplicate mac-address found error message. How to resolve the above issue?

Thanks



This archive was generated by hypermail 2.1.4 : Mon Jun 02 2008 - 06:59:15 ART