Solved: switchport port-security maximum command

georginia · ‎02-04-2009

Hello every one!

Please help methis command" switchport port-security maximum " . Once the switch learns three mac addresses , do have to use the command switchport port-security mac address sticky" or not?

I would be realy grateful for any help

thank and God bless!

lejoe.thomas · ‎02-04-2009

Hi Gigi,

switchport port-security maximum 3

If you do not configure switchport port-security mac-address sticky .

The 3 addresses learnt dynamically will be stored in the address table and be lost if the switch reboots.

However if you do configure switchport port-security mac-address sticky, the addresses learnt will be stored in address table and running configuration. Ofcourse you should do copy run start or wr mem [to save running-config to startup-config]. In this case even if the switch restarts, it will not have to relearn those 3 mac addresses.

HTH

Lejoe

View solution in original post

lejoe.thomas · ‎02-04-2009

Hi,

Is it possible to use switchport port-security maximum 3, then just use the command copy running-config startup-config.?

It will be of no use (saving to startup config), because MAC address learnt are dynamic secure mac-addresses only stored in the address table.

Only when the switchport port-security mac-address sticky is configured will the dynamically learnt MAC be stored in the running configuration as well. Here it makes sense to do copy runinng config to startup config.

HTH

Lejoe

View solution in original post

lejoe.thomas · ‎02-04-2009

Hi Gigi,

switchport port-security maximum 3

If you do not configure switchport port-security mac-address sticky .

The 3 addresses learnt dynamically will be stored in the address table and be lost if the switch reboots.

However if you do configure switchport port-security mac-address sticky, the addresses learnt will be stored in address table and running configuration. Ofcourse you should do copy run start or wr mem [to save running-config to startup-config]. In this case even if the switch restarts, it will not have to relearn those 3 mac addresses.

HTH

Lejoe

georginia · ‎02-04-2009

Thank you very much for your reply.

Is it possible to use switchport port-security maximum 3, then just use the command copy running-config startup-config.?

So" switchport port-security mac -address sticky" does not have any effect. Even with or without it, i have to use " copy running-0config startup-config" so learned address will not be lost upon reboot.

thanks and God bless!

lejoe.thomas · ‎02-04-2009

Hi,

Is it possible to use switchport port-security maximum 3, then just use the command copy running-config startup-config.?

It will be of no use (saving to startup config), because MAC address learnt are dynamic secure mac-addresses only stored in the address table.

Only when the switchport port-security mac-address sticky is configured will the dynamically learnt MAC be stored in the running configuration as well. Here it makes sense to do copy runinng config to startup config.

HTH

Lejoe