switchport port security mac address sticky

Once port security is violated on an interface, the interface will go to err-disabled. Set the action to be taken when port-security is violated Switch(config-if)#switchport port-security violation Set the number of MAC addresses allowed to use this port Switch(config-if)#switchport port-security maximum (1-3072) Switch(config-if)#switchport port-security mac-address Įnable sticky learning on the interface Switch(config-if)#switchport port-security mac-address sticky If less than the maximum are set than the remaining are learned dynamically. Set the MAC addresses that are allowed to use the port. Switch(config-if)#switchport port-security Shuts down the port if there is a security violation

To recover a port from err-disabled, you must shut and no shut itĭrops all the packets from the insecure hosts at the port-security process level but does not increment the security-violation countĭrops all the packets from the insecure hosts at the port-security process level and increments the security-violation count.

A sticky MAC lets an interface retain dynamically learned MAC addresses when the switch is restarted or if the interface goes down and is brought back online.

If a port shuts down, all dynamically learned MAC addresses are removed.

If the number of MAC addresses configured on a port is less than the maximum then the remaining MAC addresses are able to be learned dynamically.

When a violation occurs the port gets shutdown.

The maximum number of secure MAC addresses is 1.

Port security and static MAC configuration are mutually exclusive.

Port security cannot be applied to an EtherChannel/Port-Channel interface.

Port security cannot be applied to the destination port for a SPAN port.

Port security cannot be applied to a trunk port.Port security is applied to access ports.Port security identifies the MAC addresses of clients allowed to forward traffic through an interface.Port security can be used on an interface to identify and limit the MAC addresses of clients that are allowed to access that port.

Switchport port security mac address sticky