Dell N3200-ON EMC Networking N-Series Switches CLI Reference Guide version 6.6 - Page 309

Default Configuration By default, port security is not enabled and VLAN port security is not enabled. The default behavior is to drop unknown packets when the limit is exceeded. There is no default action. Notifications are not sent by default. No static or sticky MAC addresses are learned or configured by default. The default number of dynamic MAC addresses per interface is 600 (300 for the N1500 Series switches). The default number of static MAC addresses per interface is 100. Both limits are subject to the total MAC address limit supported by the system. Command Mode Interface (Ethernet and port-channel) Configuration mode. Interface Range mode - Only when using switchport port-security syntax. User Guidelines Port security allows the network administrator to secure interfaces or VLANs by specifying (or learning) the allowed MAC addresses or a limit on a given port or VLAN. Packets with a matching source MAC address are forwarded normally. All other host packets are discarded. Port security operates on access, trunk and general mode ports. Two methods are used to implement port security: dynamic locking and static locking. Static locking supports an optional sticky mode. Dynamic locking implements a 'first arrival' mechanism for MAC locking. The administrator specifies how many dynamic addresses may be learned on the secure port. If the limit has not been reached, then a packet with an unknown source MAC address is learned and forwarded normally. If the MAC address limit has been reached, the packet is discarded, the MAC address is not learned, and a violation is raised. The administrator can disable dynamic learning by setting the number of allowable dynamic entries to zero. This causes all packets with unknown MAC addresses to be considered as violations. Layer 2 Switching Commands 309