snmp trap with cisco port security

xaeniac

Golden Member
Feb 4, 2005
1,641
14
81
Can anyone setup a lab with snmp? The violation shutdown does not send a SNMP trap. violation restrict sends traps just fine. Here are my configs below: feel free to use them

ip access-list standard SNMP
permit 1.1.1.1
deny any


snmp-server view myview iso included
snmp-server group test1 v3 priv read myview access SNMP
snmp-server user test test1 v3 auth md5 "test" priv aes "test" access SNMP
snmp-server enable traps port-security
snmp-server trap-source lo0
snmp-server host 1.1.1.1 version 3 priv test

int fa 0/0
switchport port-security
switchport port-security mac sti
switchport port-security vio shutdown (DOES NOT WORK)
switchport port-security vio restrict (WORKS!!)


Does anyone know how to get a SNMP trap to be sent with a violation of shutdown on a Catalyst 3560 or 3750? I have tested on both.
 
Last edited:

Lithium381

Lifer
May 12, 2001
12,452
2
0
Can anyone setup a lab with snmp? The violation shutdown does not send a SNMP trap. violation restrict sends traps just fine. Here are my configs below: feel free to use them

ip access-list standard SNMP
permit 1.1.1.1
deny any


snmp-server view myview iso included
snmp-server group test1 v3 priv read myview access SNMP
snmp-server user test test1 v3 auth md5 "test" priv aes "test" access SNMP
snmp-server enable traps port-security
snmp-server trap-source lo0
snmp-server host 1.1.1.1 version 3 priv test

int fa 0/0
switchport port-security
switchport port-security mac sti
switchport port-security vio shutdown (DOES NOT WORK)
switchport port-security vio restrict (WORKS!!)


Does anyone know how to get a SNMP trap to be sent with a violation of shutdown on a Catalyst 3560 or 3750? I have tested on both.

http://www.cisco.com/en/US/docs/swi...se/configuration/guide/swtrafc.html#wp1112934

according to Ciscos site, Restrict does indeed send a SNMP, but shutdown does not