Loading

×Sorry to interrupt
CSS Error

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

Skip to main content

Products and Accounts

Support

Knowledge

Communities

Success

Learning

My Subscriptions

Loading

Knowledge Base

Loss of network connectivity when Cisco port security is configured on the physical switch (1002811)

Last Updated: 4/9/2018Categories: TroubleshootingTotal Views: 15625Language:
Chinese (Simplified)JapaneseEnglish

4 like this article

Subscribe to get an email
newsletter with new updates

4 people found this helpful Please provide article feedback:

Details

If you are using a Cisco 6500 Switch and have port security configured on the physical switch, you may experience these symptoms:

After vMotion, virtual machine loses network connectivity

When teaming network adapters and failing one of them, a virtual machine or the ESX/ESXi host loses network connectivity

A limited number of TCP/IP connections can be established

A virtual machine cannot ping any other host on the physical network

A virtual machine cannot ping the gateway IP address

If a virtual machine is restarted, it loses network connectivity until the NIC is disabled and re-enabled

Notes:

Virtual machines can ping each other on same ESX/ESXi network

The virtual machine can ping its own IP address if the virtual NIC is configured with a static IP address

When the network connection is disabled and enabled inside the virtual machine, the network connection is restored, and the virtual machine can ping other machines on the network

Solution

Cisco Port security restricts the input to an interface by limiting and identifying MAC addresses of the virtual machines that are allowed to access the port. When a secure MAC addresses is assigned to a secure port, the port does not forward packets with source addresses outside the group of defined addresses.

If port security is enabled on the switch, the command show mac-address-table shows the virtual network adapters as having static MAC entries. When the virtual machine proceeds to connect through a different port (for example, after vMotion or a network adapter failover), its traffic is blocked on the new port. Network connection issues may occur if a switch port does not allow traffic from multiple MAC addresses.

For more information, see Configuring Port Security in the Cisco Catalyst 6500 Release 12.2SXH and Later Software Configuration Guide.

Note: The preceding link was correct as of March 21, 2014. If you find the link is broken, provide feedback and a VMware employee will update the link.

There are a few ways to resolve this issue:

Disable port security.

Configure port security with proper port numbers. This option provides some security.

Configure a secure static MAC address. This is the most secure option.

Disabling port security

Caution: This option does not provide any security.

To disable port security on the Cisco switch interface, run this command at Cisco switch port:

no switchport port-security

Configuring port security with proper port numbers

Run this command at Cisco switch port to set a maximum number of secure MAC addresses for the interface:

Switch(config-if) # switchport port-security maximum value

where value is the maximum number of MAC addresses

Note: The default maximum value is 1. Enter a value from 1 to 1024. Ensure that you enter a maximum value that allows for the number of virtual network adapters on the ESX host.

Configuring a secure static MAC address

To configure a secure static MAC address, run this command at Cisco switch port:

Router(config-if)# switchport port-security mac-address [sticky] mac_address [vlan vlan_ID]

where mac_address is the MAC address that you want to configure as static and vlan_ID is the VLAN in which the MAC address resides

To delete a static MAC address:

Run the command:

Router(config-if)# no switchport port-security mac-address [sticky] mac_address

wheremac_addressis the MAC address that you want to delete

After removing the offending MAC address the switch port link goes down. Run this command to enable the switch port:

Switch(config-if) # no shut

Additional Information

For translated versions of this article, see:

Español:

Português:

日本語: Cisco ポート セキュリティが物理スイッチで構成されている場合、ネットワークの接続が失われる (2080860)

简体中文: 在物理交换机上配置 Cisco 端口安全时网络连接丢失 (2086200)

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
Chinese (Simplified)JapaneseEnglish

Attachments

Additional Resources

KB
•
End Of General Availability of the Free vSphere Hypervisor (ESXi 7.x and 8.x) (2107518)

Result 1 of 1

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware vSphere ESXi

VMware VirtualCenter

VMware vCenter Server

VMware ESX Server

Related Versions:

VMware vSphere ESXi 6.5

VMware vSphere ESXi 6.0

VMware vSphere ESXi 5.5

VMware vSphere ESXi 5.1

VMware vSphere ESXi 5.0

VMware VirtualCenter 2.5.x

VMware VirtualCenter 2.0.x

VMware vCenter Server 6.5.x

VMware vCenter Server 6.0.x

VMware vCenter Server 5.5.x

VMware vCenter Server 5.1.x

VMware vCenter Server 5.0.x

VMware vCenter Server 4.1.x

VMware vCenter Server 4.0.x

VMware ESXi 4.1.x Installable

VMware ESXi 4.1.x Embedded

VMware ESXi 4.0.x Installable

VMware ESXi 4.0.x Embedded

VMware ESXi 3.5.x Installable

VMware ESXi 3.5.x Embedded

VMware ESX Server 3.5.x

VMware ESX Server 3.0.x

VMware ESX 4.1.x

VMware ESX 4.0.x

view all

Take Our Survey

Was this article helpful?

YES

NO

Copyright © 2005-2024 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.

Terms of Use

Your California Privacy Rights

Privacy

Accessibility

Cookie Settings

Support Assistant