rc/network
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

access: drop port-security stuff

Browse source 
At least D-Link switches are buggy in a way that prevents plugging a
MAC address into a different port before port-security timeout. Also
it makes provisioning take forever for some reason.

So just drop it and try to figure out proper STP before the next
network collapse.
This commit is contained in:
Timotej Lazar 2026-01-12 15:29:47 +01:00
parent 6b588def29
commit d5b453ad55
1 changed files with 0 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

13
roles/access/templates/config-d-link.j2
View file

@ -30,19 +30,6 @@ interface {{ iface.name }}
interface {{ iface.name }}
{# common setup for user-facing interfaces #}
{% if iface.type.value != 'lag' and not iface.mgmt_only %}
{% if iface.mode and iface.mode.value == 'access' %}
switchport port-security
switchport port-security maximum 64
switchport port-security violation shutdown
switchport port-security aging time 5
switchport port-security aging type inactivity
{% else %}
no switchport port-security
no switchport port-security maximum
no switchport port-security violation
no switchport port-security aging time
no switchport port-security aging type
{% endif %}
{% if iface.enabled %} no shutdown{% else %} shutdown{% endif %}
{% endif %}