Administrator Guide

Layer 2 Switching Commands 293
The maximum number of static MAC addresses that may be configured on a
port is limited by the switchport port-security maximum command.
This command may be invoked multiple times with different interfaces (and
the same VLAN) when used with a multicast MAC address.
Example
The following example adds a permanent static MAC address c2f3.220a.12f4
to the MAC address table.
console(config)# mac address-table static c2f3.220a.12f4 vlan 4 interface
gigabitethernet6/0/1
switchport port-security (Global Configuration)
Use the switchport port-security command in Global Configuration mode to
enable port security globally. Use the no form of the command to disable port
security globally.
Syntax
switchport port-security
no switchport port-security
Default Configuration
Port security is disabled by default.
No MAC addresses are learned or configured by default.
Command Mode
Global Configuration mode
User Guidelines
Port security must be enabled globally and on the interface in order to be
active on the the interface. Disabling port security globally does not remove
sticky MAC address configuration from the running-config.
2CSNXXX_SWUM204.book Page 293 Monday, January 25, 2016 1:25 PM