Table of Contents
Advertisement
•
mac-address — The static MAC address to be configured on the interface
and VLAN.
•
vlan-id — The VLAN identifier on which to configure the MAC address.
dynamic — Configure the maximum number of dynamic MAC addresses
•
that be be learned on the interface. Setting the dynamic limit to 0 causes
all received packets with non-static MAC addresses to be considered as
violations.
sticky – Configure a sticky MAC address on the interface. If the sticky
•
parameter not given, a statically locked MAC address is configured on the
interface.
•
maximum — Configure the maximum number of static MAC addresses
that may be configured on the interface.
violation—Configure the interface to:
•
–
protect—Protect the interface by discarding MAC frames that are not
learned (default) and issuing a log message and a trap.
–
shutdown—Protect the interface by error disabling the interface and
issuing a log message and a trap.
Default Configuration
Port security is disabled by default.
No static or sticky MAC addresses are learned or configured by default.
The default number of dynamic MAC addresses per interface is 600 (300 for
the N1500 Series switches). The default number of static MAC addresses per
interface is 100.
Both limits are subject to the total MAC address limit supported by the
system.
Command Mode
Interface (physical and port-channel) Configuration mode.
Interface Range mode - Only when using switchport port-security syntax.
Layer 2 Switching Commands
296
Advertisement
Table of Contents
