1. When I try to add the same mac address to the second port we get the message "Found duplicate mac address." Any attempt to connect the laptop to the second port after the mac is stuck to the first port will error-disable the second port. (We have the ports shutdown when a violation occurs.)

2. The only command I have is "switchport port-security maximum" and is set to 2. My limited understanding of this setting is it will allow up to 2 mac addresses on this port.

3. I enabled the aging timer.

So far no luck. Will use of an ACL and mac table do the trick for us?

Thanks,

Ken

Ken,

Well its not allowing us to put in the same mac on both the ports.

I think we can achieve this as far as we have " mac aging " timer enabled for the dynamic mac-addresses on both the ports.

Please donot enable the sticky mac-address learning on the port as aging for sticky mac-address is not supported.

The difference between sticky and dynamic mac-address is that sticky mac-address will be learnt permanently on the ports even if the switch reboots. While the dynamic entries gets removed if the switch reboots.

Once the user moves from one port to another if the aging timer is configured the port-security table will flush the mac-address and user will be able to connect to second port.

Use the following command :

switchport port-security aging time 60 type inactive

The full config command on these two ports would be

Switch(config-if)# switchport mode access

Switch(config-if)# switchport port-security

Switch(config-if)# switchport port-security maximum 2 <--- If you to allow more than 1 mac on the ports.

Switch(config-if)# switchport port-security aging time 60 type inactive <-- after 1 minute of inactivity the mac will be flushed out of the port-security table and can be learned on the other port.

NOTE : You can mix and match this with 1 port configured for static mac with aging timer and another port configured with dynamic learning and aging.

HTH,

I tested this process on two WS-C2950T-48-SI switches. One did not work, but on the second I was able to successfully connect the laptop to two different ports. In fact, with switchport port-security maximum 2 set, I was able to connect a second laptop to the same ports. The macs from both laptops are configured to both ports and I can connect to my network.

I have not checked all of the settings against one another, but this test proves it should be possible.

FYI:

WS-C2950-24 (no good) 12.1(14)EA1a

WS-C2950T-48-SI (good) 12.1(19)EA1c

WS-C2950T-48=-SI (no good) 12.1(22)EA4a

Ken