Which port security violation mode drops traffic from unknown MAC addresses and sends an SNMP trap?

In `protect` mode, frames from unknown MAC addresses are dropped when the maximum number of secure MAC addresses is exceeded, but no notifications are sent.

In `restrict` mode, when the maximum number of secure MAC addresses is exceeded, the switch drops frames from new, unknown MAC addresses, sends an SNMP trap, and increments the violation counter.

In `shutdown` mode, the interface is immediately put into an error-disabled state, effectively shutting down the port and dropping all traffic, rather than just dropping unknown MAC address traffic.

`Shutdown VLAN` is not a valid port security violation mode.