Sticky Secure MAC Addresses

'Sticky' secure MAC address learning can be enabled with the following command:

SW1(config-if)# switchport port-security mac-address sticky

When enabled, dynamically-learned secure MAC addresses will be added to the running config like this:

switchport port-security mac-address sticky <mac-address>

The 'sticky' secure MAC addresses will never age out.

  • You need to save the running-config to the startup-config to make them truly permanent (or else they will not be kept if the switch restarts).

When you issue the switchport port-security mac-address sticky command, all current dynamically-learned secure MAC addresses will be converted to sticky secure MAC addresses.

If you issue the no switchport port-security mac-address sticky command, all current sticky secure MAC addresses will be converted to regular dynamically-learned secure MAC addresses.

MAC Address Table

Secure MAC addresses will be added to the MAC address table like any other MAC address.

  • Sticky and Static secure MAC addresses will have a type of STATIC.

  • Dynamically-learned secure MAC addresses will have a type of DYNAMIC

  • You can view all secure MAC addresses with show mac address-table secure.

PreviousSecure MAC Address AgingNextQuiz

Last updated