Troubleshooting Tip: Device on CBS 250 or 350 Series Switch not getting an IP Address after Firmware Upgrade

Objective

This article explains some of the default port security settings on the Cisco Business 250 and 350 switches. If you have a device on your network that is not receiving an IP address, you can view and change the settings to see if it corrects the issue.

Applicable Devices | Firmware Version

• CBS250 (Data Sheet) | 3.1 (Download latest)
• CBS350 (Data Sheet) | 3.1 (Download latest)
• CBS350-2X (Data Sheet) | 3.1 (Download latest)
• CBS350-4X (Data Sheet) | 3.1 (Download latest)

Introduction

It is important to run the latest version of the upgrade-firmware-if-needed when a new release comes out. In spring of 2021, version 3.1 for CBS 250 and 350 switches was released, changing the Port Security default behavior. These changes were made to improve endpoint security.

In earlier versions of the software, if you configured a port as locked, you would see the device that was attached to that locked port as a static Media Access Control (MAC) address. When you moved the device, the static MAC address was removed by default. That MAC address would be able to receive a DHCP address.

From version 3.1 moving forward, once a device has been locked and labeled as a static MAC address on a specific port, it will only be able to receive an IP address on that port. If you move the device to another port it will not be able to receive an IP address.

Long story short, if you lock a port with a MAC address attached to that port, and you move that device to another port, you need to unlock that port to release that MAC address.

View Port Security Settings

Step 1

Navigate to Security > Port Security.

Step 2

Look over the Interface Status of each port. This example shows the Interface Status as Locked.

Step 3

Navigate to MAC Address Tables > Static Addresses.

Step 4

You will see the MAC address of the device that you had assigned to the port.

Step 5

To view the MAC addresses that are receiving a DHCP IP address, navigate to MAC Address Tables > Dynamic Addresses.

Step 6

The MAC addresses of devices listed are able to receive a DHCP IP address. Notice that the MAC address of the device is not listed. The MAC address, 10:f9:20:12:86:ce is not able to receive a DHCP IP address.

Edit Port Security Settings

Step 1

Navigate to Security > Port Security.

Step 2

Click on an Interface and click the edit icon.

Step 3

If you want to unlock the port, uncheck the Lock radio button. Click Apply.

Step 4

The Interface Status should now show as unlocked.

Step 5

Navigate to MAC Address Tables > Static Addresses.

Step 6

The MAC address is no longer listed on the Static Address Table.

Step 7

Navigate to MAC Address Tables > Dynamic Addresses.

Step 8

The MAC addresses of devices listed are able to receive a DHCP IP address. Notice that the MAC address of the device is now listed on this page. This shows that the MAC address is now able to receive an IP address.

Step 9

Click the save icon to permanently save the configuration.

Conclusion

That’s it! Your device should be able to receive a DHCP IP address.

Looking for more articles on your CBS250 or CBS350 switch? Check out any of the links below for more information!