Switchport Port-Security Maximum - Cisco Nexus 7000 Series Command Reference Manual

S Commands

switchport port-security maximum

To configure the interface maximum or a VLAN maximum of secure MAC addresses on a Layer 2 Ethernet
interface or Layer 2 port-channel interface, use the switchport port-security maximum command. To remove
port security configuration, use the no form of this command.
switchport port-security maximum number [vlan vlan-ID]
no switchport port-security maximum number [vlan vlan-ID]
Syntax Description
maximum number
vlan vlan-ID
Command Default
None
Command Modes
Interface configuration
Command History
Release
4.2(1)
4.0(1)
Usage Guidelines
The default interface maximum is one secure MAC address.
Enabling port security on an interface also enables the default method for learning secure MAC addresses,
which is the dynamic method. To enable the sticky learning method, use the switchport port-security
mac-address sticky command.
You must enable port security by using the feature port-security command before you can use the switchport
port-security maximum command.
Before using this command, you must use the switchport command to configure the interface to operate as
a Layer 2 interface.
There is no default VLAN maximum.
There is a system-wide, nonconfigurable maximum of 4096 secure MAC addresses.
Specifies the maximum number of secure MAC
addresses. See the "Usage Guidelines" section for
information about valid values for the number
argument.
(Optional) Specifies the VLAN that the maximum
applies to. If you omit the vlan keyword, the
maximum is applied as an interface maximum.
Modification
Support for Layer 2 port-channel interfaces was added.
This command was introduced.
Cisco Nexus 7000 Series Security Command Reference
switchport port-security maximum
683