When I do a "sh mac-address table" I get see type STATIC when I know the address was learned dynamically by the switch.
The only thing that is learned DYNAMIC is stuff through a trunk.
I'm sure there's a simple explanation why the addresses are labeled this way but it's very confusing.
Vlan Mac Address Type Ports
16 0009.6b2f.633f STATIC Gi0/5
242 001a.a125.27ba STATIC Gi0/5
If u can send the running configuration of this port then this can be checked..also are u using commands like port-security,etc..and what kind of devices are these whose MAC address is learned on this interface..
This is a standard access switch. The devices are both phones and PCs. And I have port-security and several standard "safety features."
XX-XXX-XX-03#sh run in gi 0/5
switchport access vlan 16
switchport mode access
switchport voice vlan 242
switchport port-security maximum 5
switchport port-security aging time 1
switchport port-security violation restrict
switchport port-security aging type inactivity
srr-queue bandwidth share 10 10 60 20
srr-queue bandwidth shape 10 0 0 0
mls qos trust device cisco-phone
mls qos trust cos
auto qos voip cisco-phone
spanning-tree bpdufilter enable
spanning-tree bpduguard enable
That's the documentation that I found while researching this question too. The confusing part is that these entries were not statically added by a human.
Hmm..that is strange..can u pls send the output of the show mac-add command and also running config..of any other interface that has dynamic enteries next to it..
I can't send all of the switch config since it's company confidential information, but I can say that the sh mac-address-table output shows STATIC for any address learned through an ACCESS port and DYNAMIC for any address learned through a TRUNK. The switch is a 3560.
Yep. Any access port shows the mac-addresses learned on it as static. The only dynamic are addresses learned via trunks (0/27 and 0/28).
I would recommend you to refresh the MAC Add Table and try and then you can try removing port security command from any access port..and then check..
I think static/dynamic status you see refering to how you set the switchport mode. Dynamic means you set the port to negotiate wheter it wants to be trunk or access mode(dynamic desirable i think ??), and static means you configured the port to be access or trunk. Try remove the switchport mode access command to see whether the port status change to dynamic.