Cisco Catalyst 2960-XR - Page 271

•
You can re-enable individual VLANs by using the clear errdisable interface interface-id vlan [vlan-list]
privileged EXEC command. If you do not specify a range, all VLANs on the port are enabled.
Beginning in privileged EXEC mode, follow these steps to enable voice aware 802.1x security:
SUMMARY STEPS
1.
configure terminal
2.
errdisable detect cause security-violation shutdown vlan
3.
errdisable recovery cause security-violation
4.
clear errdisable interface interface-id vlan [vlan-list]
5.
Enter the following:
•
shutdown
•
no shutdown
6.
end
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Shuts down any VLAN on which a security violation error
occurs.
errdisable detect cause security-violation shutdown
vlan
Step 2
Example:
Switch(config)# errdisable detect cause
If the shutdown vlan keywords are not included,
the entire port enters the error-disabled state and
shuts down.
Note
security-violation shutdown vlan
(Optional) Enables automatic per-VLAN error recovery.errdisable recovery cause security-violation
Example:
Switch(config)# errdisable recovery cause
Step 3
security-violation
(Optional) Reenables individual VLANs that have been error
disabled.
clear errdisable interface interface-id vlan [vlan-list]
Example:
Switch(config)# clear errdisable interface
Step 4
•
For interface-id, specify the port on which to reenable
individual VLANs.
GigabitEthernet4/0/2 vlan
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01 249
Configuring IEEE 802.1x Port-Based Authentication
Configuring Voice Aware 802.1x Security