switchport port-security mac-address
To configure a static, secure MAC address on an interface, use the switchport port-security mac-address
command. To remove a static, secure MAC address from an interface, use the no form of this command.
switchport port-security mac-address address [vlan vlan-ID]
no switchport port-security mac-address address [vlan vlan-ID]
Syntax Description
MAC address that you want to specify as a static,
secure MAC address on the current interface.
address
(Optional) Specifies the VLAN on which traffic from
the MAC address is permitted. Valid VLAN IDs are
from 1 to 4096.
vlan vlan-ID
Command Default
None
Command Modes
Interface configuration
Command History
ModificationRelease
Support for Layer 2 port-channel interfaces was added.4.2(1)
This command was introduced.4.0(1)
Usage Guidelines
There are no default static, secure MAC addresses.
You must enable port security by using the feature port-security command before you can use the switchport
port-security mac-address command.
Before using this command, you must use the switchport command to configure the interface to operate as
a Layer 2 interface.
This command does not require a license.
Examples
This example shows how to configure 0019.D2D0.00AE as a static, secure MAC address on the Ethernet 2/1
interface:
switch# configure terminal
switch(config)# interface ethernet 2/1
switch(config-if)# switchport port-security mac-address 0019.D2D0.00AE
switch(config-if)#
Cisco Nexus 7000 Series Security Command Reference
679
S Commands
switchport port-security mac-address