Forcing Port Security Activation; Database Reactivation - Cisco Nexus 5000 Series Configuration Manual

Configuring Port Security
• The auto-learning feature was enabled before the activation. To reactivate a database in this state, disable
• The exact security is not configured for each port channel member.
• The configured database is empty but the active database is not.
If the database activation is rejected due to one or more conflicts listed in the previous section, you may decide
to proceed by forcing the port security activation.

Forcing Port Security Activation

If the port security activation request is rejected, you can force the activation.
If you force the activation, existing devices are logged out if they violate the active database.
Note
You can view missing or conflicting entries using the port-security database diff active vsan command in
EXEC mode.
To forcefully activate the port security database, perform this task:
SUMMARY STEPS
1. switch# configuration terminal
2. switch(config)# port-security activate vsan vsan-id force
DETAILED STEPS
Command or Action
Step 1
switch# configuration terminal
Step 2
switch(config)# port-security activate vsan vsan-id
force

Database Reactivation

If auto-learning is enabled, you cannot activate the database without the force option until you disable
Tip
auto-learning.
To reactivate the port security database, perform this task:
OL-xxxxx-xx
auto-learning.
Purpose
Enters configuration mode.
Forces the port security database to activate for the
specified VSAN even if conflicts occur.
Cisco Nexus 5000 Series NX-OS SAN Switching Configuration Guide
Port Security Activation
219