H3C S6812 Series Command Reference Manual page 1898

Predefined user roles
network-admin
Usage guidelines
The dynamic secure MAC feature converts sticky MAC addresses to dynamic and disables saving
them to the configuration file.
After you execute this command, you cannot manually configure sticky MAC addresses, and secure
MAC addresses learned by a port in autoLearn mode are dynamic. All dynamic MAC addresses are
lost at reboot. Use this command when you want to clear all sticky MAC addresses after a device
reboot.
You can display dynamic secure MAC addresses by using the display port-security mac-address
security command.
The undo port-security mac-address dynamic command converts all dynamic secure MAC
addresses on the port to sticky MAC addresses. You can manually configure sticky MAC
addresses.
Examples
# Enable the dynamic secure MAC feature on Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] port-security mac-address dynamic
Related commands
display port-security
display port-security mac-address security
port-security mac-address security
Use port-security mac-address security to add a secure MAC address.
Use undo port-security mac-address security to remove a secure MAC address.
Syntax
In Layer 2 Ethernet interface view:
port-security mac-address security [ sticky ] mac-address vlan vlan-id
undo port-security mac-address security [ sticky ] mac-address vlan vlan-id
In system view:
port-security mac-address security [ sticky ] mac-address interface interface-type
interface-number vlan vlan-id
undo port-security mac-address security [ [ mac-address [ interface interface-type
interface-number ] ] vlan vlan-id ]
Default
No manually configured secure MAC address entries exist.
Views
System view
Layer 2 Ethernet interface view
Predefined user roles
network-admin
10