Dell N3200-ON EMC Networking N-Series Switches CLI Reference Guide version 6.7 - Page 315

station movement occurs. Statically locked MAC addresses are not eligible for aging. If a packet arrives on a port with a source MAC address that is statically locked on another port, then the packet is discarded. Static locking allows the administrator to specify a list of host MAC addresses that are admitted on a port. The behavior of packets is the same as for dynamic locking: only packets with a known source MAC address can be admitted and forwarded. Any packets with source MAC addresses that are not configured are discarded. The switch treats this as violation and supports send a SNMP port-security trap. If the administrator knows the specific MAC address (or addresses) that will be connected to a particular port, she can specify those addresses as static entries. By setting the number of allowable dynamic entries to zero, only packets with a source MAC address matching a MAC address in the static list are forwarded. To configure static locking only, set the dynamic MAC limit to 0. To configure dynamic locking only, set the static MAC limit to 0. Sticky mode configuration converts all the existing dynamically learned MAC addresses on an interface to sticky. This means that they will not age out and will appear in the running-config. In addition, new addresses learned on the interface will also become sticky. Note that sticky is not the same as static - the difference is that all sticky addresses for an interface are removed from the running-config when the interface is taken out of sticky mode. Static addresses must be removed from the running-config individually. Sticky MAC addresses appear in the running-config in the following form: switchport port-security mac-address sticky 0011.2233.4455 vlan 33 Statically locked MAC addresses appear in the running-config in the following form: switchport port-security mac-address 0011.2233.4455 vlan 33 Command History Updated in 6.3.0.1 firmware. VLAN capability added in the 6.6.1 firmware release. Layer 2 Switching Commands 315