CCNA R&S (CCNA5.0) Tự động khôi phục trạng thái err-disable trên các port Cisco switch
Nguồn: thietbivienthongbachkhoa.com
Trên Cisco switch, nếu cấu hình tính năng bảo vệ như Port-Security, DAI … khi vi phạm thì port sẽ đặt vào trạng thái err-disable. Để tự động khôi phục trạng thái (thay vì phải phải sử dụng lệnh shutdown và no shutdown ), bạn có thể sử dụng lệnh sau:
DLS1(config)#errdisable recovery cause ?
all Enable timer to recover from all error causes
arp-inspection Enable timer to recover from arp inspection error disable state
bpduguard Enable timer to recover from BPDU Guard error
channel-misconfig Enable timer to recover from channel misconfig error
dhcp-rate-limit Enable timer to recover from dhcp-rate-limit error
dtp-flap Enable timer to recover from dtp-flap error
gbic-invalid Enable timer to recover from invalid GBIC error
inline-power Enable timer to recover from inline-power error
l2ptguard Enable timer to recover from l2protocol-tunnel error
link-flap Enable timer to recover from link-flap error
link-monitor-failure Enable timer to recover from link monitoring failure
loopback Enable timer to recover from loopback error
mac-limit Enable timer to recover from mac limit disable state
oam-remote-failure Enable timer to recover from OAM detected remote failure
pagp-flap Enable timer to recover from pagp-flap error
port-mode-failure Enable timer to recover from port mode change failure
psecure-violation Enable timer to recover from psecure violation error
security-violation Enable timer to recover from 802.1x violation error
sfp-config-mismatch Enable timer to recover from SFP config mismatch error
storm-control Enable timer to recover from storm-control error
udld Enable timer to recover from udld error
unicast-flood Enable timer to recover from unicast flood error
vmps Enable timer to recover from vmps shutdown error
Thời lượng tự động khôi phục là 300′
DLS1#show errdisable recovery
ErrDisable Reason Timer Status
—————– ————–
arp-inspection Enabled
bpduguard Disabled
channel-misconfig Disabled
dhcp-rate-limit Disabled
dtp-flap Disabled
gbic-invalid Disabled
inline-power Disabled
l2ptguard Disabled
link-flap Disabled
mac-limit Disabled
link-monitor-failure Disabled
loopback Disabled
oam-remote-failure Disabled
pagp-flap Disabled
port-mode-failure Disabled
psecure-violation Disabled
security-violation Disabled
sfp-config-mismatch Disabled
storm-control Disabled
udld Disabled
unicast-flood Disabled
vmps Disabled
Timer interval: 300 seconds
Interfaces that will be enabled at the next timeout:
Khi hết thời gian 300′, port sẽ tự động khôi phục trạng thái. Ví dụ:
*Mar 1 00:40:24.123: %PM-4-ERR_RECOVER: Attempting to recover from arp-inspection err-disable state on Fa0/5
Để đặt lại thời gian, sử dụng lệnh sau:
DLS1(config)#errdisable recovery interval ?
<30-86400> timer-interval(sec)
Nguồn: http://duchm72.wordpress.com/