Cisco Catalyst 3650 Series, Command Reference Manual

Page: 859 / 1108

switchport port-security mac-address
To configure secure MAC addresses or sticky MAC address learning, use the switchport port-security
mac-address interface configuration command. To return to the default setting, use the no form of this
command.
switchport port-security mac-address { mac-address [ vlan { vlan-id { access| voice }}]| sticky [ mac-address |
vlan { vlan-id { access| voice }}]}
no switchport port-security mac-address
{ mac-address [
vlan
{ vlan-id {
access| voice
}}]|
sticky
[ mac-address |
vlan {
vlan-id
{ access| voice }}]}
Syntax Description
A secure MAC address for the interface by entering a 48-bit MAC address. You
can add additional secure MAC addresses up to the maximum value configured. mac-address
(Optional) On a trunk port only, specifies the VLAN ID and the MAC address. If
no VLAN ID is specified, the native VLAN is used.
vlan vlan-id
(Optional) On an access port only, specifies the VLAN as an access VLAN.
vlan access
(Optional) On an access port only, specifies the VLAN as a voice VLAN.
The voice keyword is available only if voice VLAN is configured on a
port and if that port is not the access VLAN.
Note
vlan voice
Enables the interface for sticky learning. When sticky learning is enabled, the
interface adds all secure MAC addresses that are dynamically learned to the running
configuration and converts these addresses to sticky secure MAC addresses.
sticky
(Optional) A MAC address to specify a sticky secure MAC address. mac-address
Command Default
No secure MAC addresses are configured.
Sticky learning is disabled.
Command Modes
Interface configuration
Command History
Modification Release
This command was introduced. Cisco IOS XE 3.3SECisco IOS XE 3.3SE
Usage Guidelines
A secure port has the following limitations:
• A secure port can be an access port or a trunk port; it cannot be a dynamic access port.
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
833
switchport port-security mac-address