542 Port Security Commands
port-security mac-
address move
This command converts dynamically locked MAC addresses to statically locked
addresses for an interface or range of interfaces.
port-security mac-
address sticky
This command enables sticky mode Port MAC Locking on a port. If
accompanied by a MAC address and a VLAN id (for interface config mode
only), it adds a sticky MAC address to the list of statically locked MAC
addresses. These sticky addresses are converted back to dynamically locked
addresses if sticky mode is disabled on the port. The <vid> is the VLAN ID. The
Global command applies the “sticky” mode to all valid interfaces (physical and
LAG). There is no global sticky mode as such.
Sticky addresses that are dynamically learned will appear in “show running-
config” on page 177 as “port-security mac-address sticky <mac> <vid>” entries.
This distinguishes them from static entries.
The following shows an example of the command.
(CN1610)(Config)# port-security mac-address sticky
(CN1610)(Interface)# port-security mac-address sticky
(CN1610)(Interface)# port-security mac-address sticky
00:00:00:00:00:01 2
no port-security
mac-address sticky
The no form removes the sticky mode. The sticky MAC address can be deleted
by using the command “no port-security mac-address <mac-address> <vid>”.
Format
no port-security mac-address
mac-address vid
Mode Interface Config
Format
port-security mac-address move
Mode Interface Config
Format
port-security mac-address sticky [<mac-address> <vid>]
Mode ◆ Global Config
◆ Interface Config
To Next Page
Loading...
