How does Dynamically learned MAC Address Port Security work

Remove these MAC addresses by using the undo port-security mac-address security command. Static secure MAC addresses never age out unless you perform the following operations: When the timer expires, the sticky MAC addresses are removed. You can use the port-security timer autolearn aging command to set an aging timer for the sticky MAC addresses. Sticky MAC addresses do not age out by default. Sticky MAC addresses can be manually configured or automatically learned in autoLearn mode. To successfully add secure MAC addresses on a port, first complete the following tasks:Ĭonfigure the port to permit packets of the specified VLAN to pass or add the port to the VLAN.

You can add important or frequently used MAC addresses as sticky or static secure MAC addresses to avoid the secure MAC address limit causing authentication failure. You can bind a secure MAC address only to one port in a VLAN. Secure MAC addresses are MAC addresses configured or learned in autoLearn mode, and if saved, can survive a device reboot. The value range for the vlan-id argument is 1 to 4094. Vlan vlan-id: Specifies the VLAN to which the secure MAC address belongs.

Interface interface-type interface-number: Specifies a port by its type and number. Mac- address: Specifies a MAC address, in H-H-H format. If you do not specify this keyword, the command configures a static secure MAC address. S ticky: Specifies the MAC address type as sticky.

Layer 2 Ethernet interface view Predefined user roles No manually configured secure MAC address entries exist. Undo port -security mac-address security ] vlan vlan-id ] Default Port-security mac-address security mac-address interface interface-type interface-num ber vlan vlan - id Undo port -security mac-address security mac- address vlan vlan-id Port -security mac-address security mac- address vlan vlan-id Use undo port-security mac-address security to remove a secure MAC address. Use port-security mac-address security to add a secure MAC address.

How does Dynamically learned MAC Address Port Security work