Static MAC assignment on a switch

mzinz

I don't understand the purpose of applying a static MAC address to a switch. I read about how it increases security, and will never be flushed out.. but I don't really understand how/why.

If I do this:
Switch(config)# mac-address-table static 1234.56AB.CDEF vlan 2 interface fa0/5

What will that do exactly?

Can ONLY the machine with that exact MAC address connect to int fa0/5? Does it have to be on vlan 2? If a certain port is assigned to a VLAN on the switch, and you apply a static MAC address which specifies a different VLAN.. will it still work?

It's all just very unclear to me.. If someone could sort of break it down, that would really help

cambei

It increases security in that if you had an office that was closed at night, someone couldn't just plug in a laptop into the port a high level employee uses and access that vlan etc, infact iirc the port on the switch shuts down and that user will not be connected to the network at all.