Default Smartport Macro Configuration - Cisco Catalyst 4500 Series Configuration Manual

Configuring SmartPort Macros

Default SmartPort Macro Configuration

This section illustrates the default configurations for the four supported macros. These macros can only
be viewed and applied; they cannot be modified by the user.
•
•
•
•
•
cisco-global
This is the example for the cisco-global macro:
# Enable dynamic port error recovery for link state failures.
errdisable recovery cause link-flap
errdisable recovery interval 60
# VTP requires Transparent mode for future 802.1x Guest VLAN
# and current Best Practice
vtp domain [smartports]
vtp mode transparent
# Enable aggressive mode UDLD on all fiber uplinks
udld aggressive
# Enable Rapid PVST+ and Loopguard
spanning-tree mode rapid-pvst
spanning-tree loopguard default
spanning-tree extend system-id
cisco-desktop
This is the example for the cisco-desktop macro:
# Basic interface - Enable data VLAN only
# Recommended value for access vlan (AVID) should not be 1
switchport access vlan $AVID
switchport mode access
# Enable port security limiting port to a single
# MAC address -- that of desktop
switchport port-security
# Ensure port-security age is greater than one minute
# and use inactivity timer
# "Port-security maximum 1" is the default and will not
# Show up in the config
switchport port-security violation restrict
switchport port-security aging time 2
switchport port-security aging type inactivity
# Configure port as an edge network port
spanning-tree portfast
spanning-tree bpduguard enable
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
18-4
cisco-global, page 18-4
cisco-desktop, page 18-4
cisco-phone, page 18-5
cisco-router, page 18-5
cisco-switch, page 18-5
Chapter 18 Configuring SmartPort Macros
OL-25340-01