Dynamic port-security issue on Cisco Catalyst 3550 with 12.2(52)

Tweet

Dynamic port-security feature issue on Cisco Catalyst 3550 with c3550-ipbasek9-mz.122-52.SE.bin.

Cisco Catalyst 3550 is still widely used although that is discontinuous model.

While we were deploying port-security feature on old network, we noticed dynamic port-security issue on Cisco Catalyst 3550 with IOS c3550-ipbasek9-mz.122-52.SE.bin. 

Well, not sure where they got the IOS. Per Cisco official website, 12.2(44).SE6 EMI is the latest one.

Tried many different sequence and order of configuration step, but no luck.

However, Dynamic port-security feature issue has resolved, once downgraded(?) with 12.2(44).SE6.

 

Debugging port-security, I got below output

 

Switch#

*Mar 1 02:04:32.654: PSECURE: psecure_get_next_mac_from_hat: retuning NULL on Fa0/1

and

*Mar 1 02:04:32.654: PSECURE: PSECURE: psecure_vp_list_fwdchange invoked