Table of Contents
Advertisement
7.4.2 Sticky Mac
Port security with sticky MAC addresses provides many of the same benefits as port security
with static MAC addresses, but sticky MAC addresses can be learned dynamically. Port
security with sticky MAC addresses retains dynamically learned MAC addresses during a link-
down condition.
If you enter a write memory or copy running-config startup-config command, then port
security with sticky MAC addresses saves dynamically learned MAC addresses in the startup-
config file and the port does not have to learn addresses from ingress traffic after bootup or a
restart.
7.4.2.1 CLI Configurations
Node
Command
enable
show port-security
enable
configure terminal
configure
interface IFNAME
interface
port-security mac-
address sticky
MACADDR vlan
<1-4094>
interface
no port-security
mac-address sticky
MACADDR vlan
<1-4094>
interface
port-security mac-
address sticky
interface
no port-security
mac-address sticky
config
interface range
gigabitethernet1/0/
PORTLISTS
if-range
port-security mac-
address sticky
if-range
no port-security
mac-address sticky
The procedures to enable port security with sticky MAC addresses on a port:
To enable the global Port-Security.
L2SWITCH(config)#port-security enable
To select the port you want to configure.
L2SWITCH(config)#interface gigabitethernet1/0/5
To enable the port Port-Security.
Description
This command displays the current port security
configurations.
This command changes the node to configure node.
This command enters the interface configure node.
This command configures a sticky MAC with a
VLAN on the specific port.
This command removes a sticky MAC with a VLAN
for the specific port from the MAC table.
This command enables the stick function on the
specific port.
This command disables the stick function on the
specific port.
This command enters the if-range configure node.
This command enables the stick function on the
specific ports.
This command disables the stick function on the
specific ports.
281
Advertisement
Table of Contents
