ErrDisable Recovery automatically re-enables a Cisco switch port after an error-disabled condition, but recovery does not remove the underlying cause. A port can be disabled again immediately when the original violation remains active. section 12.1.2 section 12.3
Configure and verify recovery with these operational rules:
- Enable recovery globally for a selected cause with errdisable recovery cause cause; supported examples include bpduguard, inline-power, and psecure-violation. section 12.1.2
- Use show errdisable recovery to inspect each cause, the timer interval, and interfaces awaiting recovery. section 12.1.2
- Expect recovery to be disabled by default and the default timer to be 300 seconds. section 12.1.2 section 12.3
- Change the timer globally with errdisable recovery interval seconds. section 12.1.2
- Manually recover a port with shutdown followed by no shutdown, but correct the triggering condition first. section 12.1.2
Enable Port Security recovery
SW1(config)# errdisable recovery cause psecure-violation SW1(config)# do show errdisable recovery The output shows psecure-violation as Enabled and lists Fa0/1 with 295 seconds remaining. Fa0/1 will be re-enabled when the countdown reaches zero. section 12.1.2
SW1(config)# errdisable recovery cause psecure-violation #1 SW1(config)# do show errdisable recovery ErrDisable Reason Timer Status ----------------- -------------- . . . psecure-violation Enabled #2 . . . Timer interval: 300 seconds Interfaces that will be enabled at the next timeout: Interface Errdisable reason Time left(sec) --------- ----------------- -------------- Fa0/1 psecure-violation 295 #3 #1 Enables ErrDisable Recovery for ports disabled by Port Security #2 ErrDisable Recovery is enabled for ports disabled by Port Security. #3 F0/1 will be reenabled after the timer counts down to 0.
Inspect the annotated Cisco CLI listing showing per-cause activation and the countdown for an awaiting interface. section 12.1.2
