Removing A Dynamic Secure Mac Address - Cisco Nexus 9000 Series Configuration Manual

Removing a Dynamic Secure MAC Address

Command or Action
Step 3 no switchport port-security mac-address sticky
Example:
switch(config-if)# no switchport port-security
mac-address sticky
Step 4 clear port-security dynamic address address
Example:
switch(config-if)# clear port-security dynamic
address 0019.D2D0.02GD
Step 5 (Optional) show port-security address interface
{ethernet slot/port | port-channel channel-number}
Example:
switch(config)# show port-security address
interface ethernet 2/1
Step 6 (Optional) switchport port-security mac-address sticky
Example:
switch(config-if)# switchport port-security
mac-address sticky
Removing a Dynamic Secure MAC Address
You can remove dynamically learned, secure MAC addresses.
Before you begin
You must have enabled port security globally.
SUMMARY STEPS
1. configure terminal
2. clear port-security dynamic {interface ethernet slot/port | address address} [vlan vlan-ID]
3. (Optional) show port-security address
4. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2 clear port-security dynamic {interface ethernet slot/port
| address address} [vlan vlan-ID]
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
318
Purpose
Disables sticky MAC address learning on the interface,
which converts any sticky secure MAC addresses on the
interface to dynamic secure MAC addresses.
Removes the dynamic secure MAC address that you specify.
Displays secure MAC addresses. The address that you
removed should not appear.
Enables sticky MAC address learning again on the interface.
Purpose
Enters global configuration mode.
Removes dynamically learned, secure MAC addresses, as
specified.
Configuring Port Security