 should not be 1 switchport access vlan $access_vlan switchport mode access # Enable port security limiting port to a single # MAC address -- that of desktop switchport port-security switchport port-security maximum 1 # Ensure port-security age is greater than one minute # and use inactivity timer switchport port-security violation restrict switchport port-security aging time 2 switchport port-security aging type inactivity # Configure port as an edge network port spanning-tree portfast spanning-tree bpduguard enable This macro contains some advanced features, such as variables and comments. See the Cisco documentation for further details on the macro feature. If you've been wondering how to apply a smartport macro to an interface-range macro, here is your answer (assuming an interface-range macro named Workstations, and a smartport macro named SetPortsPortfast): SW2 (config)# interface range macro Workstations SW2 (config-if-range)# macro apply SetPortsPortfast Chapter 18: Catalyst 3750 Features Flex Links Flex links are layer-2 interfaces manually configured in primary/failover pairs. The Spanning Tree Protocol (STP, discussed in Chapter 8) normally provides primary/ failover functionality, but it was designed for the sole purpose of preventing loops. Flex links are used to ensure that there are backup links for primary links. Only one of the links in a flex-link pair will be forwarding traffic at any time. Flex links are designed for switches where you do not wish to run spanning tree, and should be used only on switches that do not run spanning tree. Should flex links be configured on a switch running spanning tree, the flex links will not participate in STP. Flex links are configured on the primary interface by specifying the backup interface with the switchport backup interface command: interface GigabitEthernet1/0/20 switchport access vlan 10 switchport backup interface Gi1/0/21 interface GigabitEthernet1/0/21 switchport access vlan 10 No configuration is necessary on the backup interface. Neither of the l