Users Guide

Command Mode
INTERFACE
Usage
Information
After you enable port security on an interface, by default, the maximum number of MAC addresses that
the interface can learn is one. This is applicable for both dynamic and static secure MAC addresses.
After you enable port security on an interface, by default, sticky MAC addresses and MAC movement are
disabled on the interface.
This command enables port security on an interface. If you disable the feature globally, this command
does not take effect on an interface.
The no version of this command disables port security on an interface.
Example
OS10(config-if-eth1/1/2)# switchport port-security
Supported
Releases
10.5.1.0 or later
switchport port-security (global)
Enables the port security feature on the system globally.
Syntax
switchport port-security
Parameters
None
Default Port security is enabled globally.
Command Mode
● CONFIGURATION
Usage
Information
After you enable the port security feature on the system globally, enable port security on the required
interfaces using this command in INTERFACE CONFIGURATION mode.
The no version of this command disables the port security feature on the system.
Example
OS10(config)# no switchport port-security
Supported
Releases
10.5.1.0 or later
sticky
Enables sticky MAC address learning or converts existing dynamic MAC addresses as sticky.
Syntax
sticky
Parameters
None
Default Disabled
Command Mode
CONFIGURATION-PORT-SECURITY
Usage
Information
This command enables sticky MAC address learning or converts existing dynamic MAC addresses as
sticky. Sticky MAC addresses persist system reloads.
For the sticky MAC feature to function, enable MAC address learning limit using the mac learn-limit
command.
Example
OS10(config-if-port-sec)# sticky
Supported
Releases
10.5.1.0 or later
Security 1403