Port Security Issue

[johnilu]

I have an HP LaserJet 5550 that is regularly getting a port security violation when connected to and older Catalyst 5509 switch.

The following is what is what the switch is seeing. Has anyone seen this before, and can you explain what might be happening.

Port Security Secure-Src-Addr Last-Src-Addr Shutdown
----- -------- ----------------- ----------------- --------
7/7 enabled 00-01-e6-a1-8a-35 01-e6-a1-8a-35-08 No

Your assistance is appreciated.

 

[computerhighguy]

What is the MAC address of the printer? I remeber something a while back when we tried this. The way the IOS reports the MAC address is different than the actual MAC address. Post the MAC address and maybe it will jog my memory a bit.



It is what it is!!
__________________________________
A+, Net+, I-Net+, Certified Web Master, MCP, MCSA, MCSE, CCNA, CCDA, and few others (I got bored one day)

 

[johnilu]

Good idea. I had looked at that an spaced it out. The true mac on the printer is 00-11-0A-C4-A8-79.

 

[burtsbees]

Port security is enabled on that switchport, which is configured for the MAC address that you see---when a diffrent device with a different MAC address is connected (like that of the printer), then the security action that is set is "shutdown the port". Do you want the port security disabled, or do you want the MAC address of the printer set as the only MAC address allowed to connect?
This technology is good for, say, when a sales guy has a laptop with viruses from all the porn he downloads that he plugs into the network---with port security enabled, the port shuts down if his MAC address is not allowed on the port.

Burt

 

[computerhighguy]

Either the output you gave is incorrect or the MAC address you posted is incorrect.

Secure-Src-Addr: 00-01-e6-a1-8a-35
Last-Src-Addr: 01-e6-a1-8a-35-08
You posted: 00-11-0A-C4-A8-79

None of them match. Do you have a hub or switch hooked up to this port? Port security really only works with 1 device (no switch, hubs would be OK with only 1 device attached). The MACs do not match.



It is what it is!!
__________________________________
A+, Net+, I-Net+, Certified Web Master, MCP, MCSA, MCSE, CCNA, CCDA, and few others (I got bored one day)

 

[johnilu]

I know none of them match take a look at the first two. See the difference? Then look at the third. It is the true physical address. The first two are virtual, or that is what they appear to be. Not sure were they are coming from. I know that when I manipulate the port I can get things working again. The 1st address is what the switch port sees first. I think the second address pops up when the device is coming out of power saver.

 

[burtsbees]

Have you looked at
switch#sh mac-address-table
yet?

Burt