Reference Guide

port-security mac-address move
This command converts dynamically locked MAC addresses to statically locked addresses for an
interface or range of interfaces.
Format port-security mac-address move
Mode Interface Config
port-security mac-address sticky
This command enables sticky mode Port MAC Locking on a port. If accompanied by a MAC address and
a VLAN id (for interface config mode only), it adds a sticky MAC address to the list of statically locked
MAC addresses. These sticky addresses are converted back to dynamically locked addresses if sticky
mode is disabled on the port. The vid is the VLAN ID. The Global command applies the “sticky” mode
to all valid interfaces (physical and LAG). There is no global sticky mode as such.
Sticky addresses that are dynamically learned will appear in show running-config as port-
security mac-address sticky mac-address vid entries. This distinguishes them from
static entries.
Format port-security mac-address sticky [mac-address vid]
Mode
•
Global Config
•
Interface Config
The following shows an example of the command.
(Extreme 220)(Config)# port-security mac-address sticky
(Extreme 220)(Interface)# port-security mac-address sticky
(Extreme 220)(Interface)# port-security mac-address sticky
00:00:00:00:00:01 2
no port-security mac-address sticky
The no form removes the sticky mode. The sticky MAC address can be deleted by using the no port-
security mac-address command.
Format
no port-security mac-address sticky [mac-address vid]
Mode
•
Global Config
•
Interface Config
mac-address-table limit
This command enables VLAN port security. VLAN MAC locking allows you to secure the network by
locking down allowable MAC addresses on a given VLAN. Packets with a matching source MAC address
can be forwarded normally. All other packets will be discarded. VLAN MAC locking will lock the dynamic
MAC entries.
Switching Commands
ExtremeSwitching 200 Series: Command Reference Guide for version 01 .02.04.0007 456