47-10
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter 47 Configuring Port Security
Configuring Port Security
Enabling Port Security with Sticky MAC Addresses on a Port
Release 12.2(18)SXE and later releases support port security with sticky MAC addresses. To enable port
security with sticky MAC addresses on a port, perform this task:
When enabling port security with sticky MAC addresses, note the following information:
• When you enter the switchport port-security mac-address sticky command:
–
All dynamically learned secure MAC addresses on the port are converted to sticky secure MAC
addresses.
–
Static secure MAC addresses are not converted to sticky MAC addresses.
–
Secure MAC addresses dynamically learned in a voice VLAN are not converted to sticky MAC
addresses.
–
New dynamically learned secure MAC addresses are sticky.
• When you enter the no switchport port-security mac-address sticky command, all sticky secure
MAC addresses on the port are converted to dynamic secure MAC addresses.
• To preserve dynamically learned sticky MAC addresses and configure them on a port following a
bootup or a reload, after the dynamically learned sticky MAC addresses have been learned, you must
enter a write memory or copy running-config startup-config command to save them in the
startup-config file.
This example shows how to enable port security with sticky MAC addresses on Fast Ethernet port 5/12:
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# interface fastethernet 5/12
Router(config-if)# switchport port-security mac-address sticky
Command Purpose
Step 1
Router(config)# interface
type
1
slot/port
1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet
Selects the LAN port to configure.
Step 2
Router(config-if)# switchport port-security
mac-address sticky
Enables port security with sticky MAC addresses on a
port.
Router(config-if)# no switchport port-security
mac-address sticky
Disables port security with sticky MAC addresses on a
port.