Cisco Systems DSC9148D8G48PK9 manual Configuring Port Guard

Chapter 2 Configuring Interfaces

Configuring Interfaces

Configuring Port Guard

Detailed Steps

To enable or disable the port guard for a port, follow these steps:

	Command	Purpose
Step 1
	switch# config t	Enters configuration mode.
Step 2
	switch(config)# interface fc1/1	Selects the port interface.
Step 3
	switch(config)# errdisable detect cause	Brings the port to down state if the link flaps
	link-down	once.
	switch(config)# errdisable detect cause	Enables the port guard configuration for the
	link-down [num-times number duration	interface. Brings the port to down state if the link
	seconds]	flaps for the number of instances within the
		specified seconds.
	switch(config)# no errdisable detect cause	Removes (default) the port guard configuration
	link-down	for the interface. The link resumes flapping and
		sending error reports normally.
Step 4
	switch(config)# errdisable detect cause	Brings the port to down state if the specified error
	{trustsec-violation bit-errors	occurs even once.
	credit-loss link-reset signal-loss
	sync-loss}
	switch(config)# errdisable detect cause	Brings the port to down state if the specified error
	{trustsec-violation bit-errors	occurs for the number of instances within the
	credit-loss link-reset signal-loss	specified seconds.
	sync-loss}[num-times number duration
	seconds]
	switch(config)# no errdisable detect cause	Removes (default) the port guard configuration
	{trustsec-violation bit-errors	for the interface. The link resumes flapping and
	credit-loss link-reset signal-loss	sending error reports normally.
	sync-loss}

Examples

This example shows how to configure port guard to bring a port to down state if the link flaps 5 times within 120 seconds based on multiple causes:

Switch# config t

Switch (config)# interface fc1/1

Switch (config-if)#errdisable detect cause link-down num-times 5 duration 120

Switch (config-if)#errdisable detect cause bit-errors num-times 5 duration 120

Switch (config-if)#errdisable detect cause credit-loss num-times 5 duration 120

The above example sets the configuration to the following status:

•The port will be error-disabled due to bit errors if the port suffers link failure due to bit errors 5 times in 120 seconds.

•The port will be error-disabled due to credit loss if the port suffers link failure due to credit loss 5 times in 120 seconds.

•The port will be error-disabled due to link down if the port suffers link failure due to bit errors 2 times and link-failure due to credit loss 3 times in 120 seconds.

This example shows the internal information about a port in down state because of TrustSec violation:

	Cisco MDS 9000 Family NX-OS Interfaces Configuration Guide
2-30	OL-29284-01, Release 6.x