Switch Port security

Bolton07

Whats the difference between just typing?

switchport port-security maximum 1
switchport port-security violation shutdown

and adding the sticky command in

switchport port-security mac-address sticky
switchport port-security maximum 2
switchport port-security violation shutdown

billyr

With the first command you are basically telling the switch to error disable the port should it receive more than 1 mac address at a time. for example if it was connected to a hub or subjected to a mac overflow attack.

With the second its essentially doing the same but also locking the port to 2 specific mac addressess, rather than typing in the mac addressess of the hosts manually you can use the sticky command which will basically grab the mac address of the first 2 hosts that get attached to that port. Commonly you'd see this in a VOIP deployment, one mac for the phone the other for the P.C.