Problem with ProCurve 2626 and port-security learning mode "limited-continuous"

[A Mueller]

We have the following Problem when using the learn-mode "limited-continuous" in the port-security settings on an 2626 ProCurve switch:
Two computers are connected to the 2626 - one directly (Computer A) and the second one with another switch between the computer and the 2626 (Computer B). We set the learn-mode of the port-security on both of the involved ports to "limited-continuous address limit 3". When the 2626 forgot the MAC-addresses of both computers ('show mac' shows no results), then it is impossible to ping Computer A from Computer B: The 2626 does not learn the MAC-addresses. When I start a ping from Computer B to Computer A then the 2626 learns the MAC-addresses of both computers and both computers can ping each other. I tried several firmwares (H10.31, H10.50 and H10.83) on the 2626 but that did not solve the problem.
If I try the same setup with a ProCurve 2610 switch the computers do not have problems pinging Computer A from Computer B.
Is this a bug on the 2626 ?
How do I set up port-security in learning mode with an address limit on the 2626 ?
Are there other settings that could be changed to solve the problem ?
I have not found the option "limited-continuous" in any of the manuals of the 2610. Where is it described ?

thanks for your help and greetings,

Andreas

P.S. This thread has been moevd from Switches, Hubs, Modems (Legacy ITRC forum) to ProCurve/ProVision. - Hp Forum Moderator

[Ralf Krause]

The behavior here seems to differ between older and newer models.

The keyword is eavesdrop prevention.

An excerpt from the 5400zl series manuals:
"Configuring port security on a given switch port automatically enables Eavesdrop Prevention for that port. This prevents use of the port to flood unicast packets addressed to MAC addresses unknown to the switch and blocks unauthorized users from eavesdropping on traffic intended for addresses that have aged-out of the switchâ s address table. (Eavesdrop Prevention does not affect multicast and broadcast traffic; the switch floods these two traffic types out a given port regardless of whether port security is enabled on that port.)"

On the K-Software devices, this behavior is configurable.

On other switches, it is not, and has eavesdrop prevention either enabled or not by default (I don't know for the 2600 series).



However, this does not affect chatty devices, since they will cause the switch to relearn their MAC address!


Summing up:
Your observation might be by intention.

I would suggest to contact support to have this double-checked and verified.

[b2b]

Hello i want to know is HP procurve has port-security aging command ? or any ohter equal cmd available in HP ?

[hajar1]

Hi , 

 I have the problems on HP 5412  that the port-security in learning mode doesn't work , if you have any idea for resolved that problems help me plz,

Thankx