sticky mac address

aueddonline

when you configure the maximum mac addresses that can be learnt on a port for port security using 'switchport port-security maximum (max) ' that number of addresses is dynamically leant from the port and any additional macs are violations right.

so what use is the command 'switchport port-security mac-address sticky' if that is the default behaviour for the port?

Plazma

Sticky and maximum are used together... If you had sticky without maximum, then it would dynamically learn all mac's hooked into that port and store them in the running config. The only way to stop this would be to save your config and then it would stop, but in the meantime you could have an unlimited number of MAC's become learned and "stuck".

The maximum only allows a # of MAC's to be added dynamically , once that threshold is reached, then no more can be learned.

aueddonline

ok I didn't notice that it saved in the running config, cheers that's helps