Users Guide

Secure static MAC Addresses :0
Sticky MAC Addresses :10
Secure Dynamic MAC addresses :0
OS10# show switchport port-security interface port-channel 120
Interface name : port-channel 120
Port Security :Disabled
Port Status : Up
mac-learning-limit :1024
Mac-learn-limit-Violation Action :Flood
Sticky :Enabled
Mac-move-allow :Allowed
Mac-move-violation :shutdown-offending
Aging :Disabled
Total MAC Addresses :11
Secure static MAC Addresses :0
Sticky MAC Addresses :11
Secure Dynamic MAC addresses :0
Supported
Releases
10.5.1.0 or later
switchport port-security (interface)
Enables port security on an interface.
Syntax
switchport port-security
Parameters
None
Default Disabled
Command Mode
INTERFACE
Usage
Information
After you enable port security on an interface, by default, the maximum number of MAC addresses that
the interface can learn is one. This is applicable for both dynamic and static secure MAC addresses.
After you enable port security on an interface, by default, sticky MAC addresses and MAC movement are
disabled on the interface.
This command enables port security on an interface. If you disable the feature globally, this command
does not take effect on an interface.
The no version of this command disables port security on an interface.
Example
OS10(config-if-eth1/1/2)# switchport port-security
Supported
Releases
10.5.1.0 or later
switchport port-security (global)
Enables the port security feature on the system globally.
Syntax
switchport port-security
Parameters
None
Default Port security is enabled globally.
Command Mode
● CONFIGURATION
Usage
Information
After you enable the port security feature on the system globally, enable port security on the required
interfaces using this command in INTERFACE CONFIGURATION mode.
1198 Security