Users Guide

Layer 2 Switching Commands 304
Default Configuration
No static addresses are defined. The default mode for an added address is
permanent.
Command Mode
Global Configuration mode
User Guidelines
The MAC address may be a unicast or multicast MAC address. Static MAC
addresses are never overridden by dynamically learned addresses. This has
implications for protocols like IGMP snooping, where statically configuring
the MAC address of a multicast router keeps IGMP snooping from
dynamically adding the multicast router to a different port.
The maximum number of static MAC addresses that may be configured on a
port is limited by the switchport port-security maximum command.
This command may be invoked multiple times with different interfaces (and
the same VLAN) when used with a multicast MAC address.
Example
The following example adds a permanent static MAC address c2f3.220a.12f4
to the MAC address table.
console(config)# mac address-table static c2f3.220a.12f4 vlan 4 interface
gigabitethernet6/0/1
switchport port-security (Global Configuration)
Use the switchport port-security command in Global Configuration mode to
enable port security globally. Use the no form of the command to disable port
security globally.
Syntax
switchport port-security
no switchport port-security