Secure MAC Address Aging

By default secure MAC addresses will not 'age out' (Aging Time: 0 mins)

  • Can be configured with switchport port-security aging time <minutes>

The default aging type is Absolute

  • Absolute: After the secure MAC address is learned, the aging timer starts and the MAC is removed after the timer expires, even if the switch continues receiving frames from the source MAC address.

  • Inactivity: After the secure MAC address is learned, the aging timer starts but is reset every time a frame from that source MAC address is received on the interface.

  • Aging type is configured with switchport port-security aging type {absolute | inactivity}

Secure Static MAC aging (addresses configured with switchport port-security mac-address <x.x.x>) is disabled by default.

  • Can be enabled with switchport port-security aging static

Last updated