does port security dynamically learn mac addresses without sticky

A MAC address can be a secure MAC address on one interface only.įor each interface on which you enable port security, the device can learn a limited number of MAC addresses by the static The process of securing a MAC address is called learning. Unless otherwise specified, the term interface refers to both physical interfaces and port-channel interfaces likewise, the term Layer 2 interface refers to both Layer 2 physical interfaces and Layer 2 port-channel interfaces. That the device can secure is configurable per interface. The device does not allow traffic from these MAC addresses on another interface within the same VLAN. The MAC addresses in the restricted set are called secure MAC addresses. Port security allows you to configure Layer 2 physical interfaces and Layer 2 port-channel interfaces to allow inbound trafficįrom only a restricted set of MAC addresses. This chapter includes the following sections: This chapter describes how to configure port security on Cisco NX-OS devices. Additional References for Port Security.Example: Configuring Port Security on the vPC Leg.Example: Configuring Port Security on an Orphan Port.Configuration Examples for Port Security in a vPC Domain.Configuration Example for Port Security.Verifying the Port Security Configuration.Configuring a Security Violation Action.Configuring an Address Aging Type and Time.Configuring a Maximum Number of MAC Addresses.Removing a Static Secure MAC Address on an Interface.Adding a Static Secure MAC Address on an Interface.

Enabling or Disabling Sticky MAC Address Learning.

Enabling or Disabling Port Security on a Layer 2 Interface.

Enabling or Disabling Port Security Globally.

Guidelines and Limitations for Port Security on vPCs.

Guidelines and Limitations for Port Security.

Licensing Requirements for Port Security.

Port Security and Port-Channel Interfaces.

Does port security dynamically learn mac addresses without sticky