203
Table 14 A comparison of static, sticky, and dynamic secure MAC addresses
Type Address sources Aging mechanism
Can be saved and
survive a device
reboot?
Static Manually added
Not available.
They never age out unless you manually remove
them, change the port security mode, or disable
the port security feature.
Yes.
Sticky
Manually added or
automatically learned
when the dynamic
secure MAC function
(port-security
mac-address
dynamic) is disabled.
Sticky MAC addresses by default do not age
out, but you can configure an aging timer or use
the aging timer together with the inactivity aging
function to delete old sticky MAC addresses:
• If only an aging timer is configured, the
aging timer counts up regardless of whether
traffic data has been sent from the sticky
MAC address.
• If both an aging timer and the inactivity
aging function are configured, the aging
timer restarts once traffic data is detected
from the sticky MAC address.
Yes.
The secure MAC aging
timer restarts at a
reboot.
Dynamic
Converted from sticky
MAC addresses or
automatically learned
after the dynamic
secure MAC function
is enabled.
Same as sticky MAC addresses.
No.
All dynamic secure
MAC addresses are
lost at reboot.
Configuration prerequisites
• Enable port security.
• Set port security's limit on the number of MAC addresses on the port. Perform this task before you
enable autoLearn mode.
• Set the port security mode to autoLearn.
Configuration procedure
To configure a secure MAC address:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Set the secure MAC aging
timer.
port-security timer autolearn aging
time-value
Optional.
By default, secure MAC addresses
do note age out, and you can
remove them only by performing the
undo port-security mac-address
security command, changing the
port security mode, or disabling the
port security feature.
To Next Page
Loading...
Need help?
General
