topic Re: switch port port-security MAC-ADDRESS sticky in Network Access Control

switch port port-security MAC-ADDRESS sticky

sanochinatsu — Sun, 10 Mar 2019 23:05:34 GMT

Hello,

I set switch port port-security.

How can I reset MACaddress globally when we set MACaddress sticky?

Tnanks,

Chinatsu

Re: switch port port-security MAC-ADDRESS sticky

Mark Yeates — Wed, 17 Sep 2008 12:10:15 GMT

Chinatsu,

To delete all the sticky addresses on an interface or a VLAN, use the "clear port-security sticky interface interface-id" command.

HTH,

Mark

Re: switch port port-security MAC-ADDRESS sticky

Jagdeep Gambhir — Wed, 17 Sep 2008 12:14:13 GMT

clear port-security sticky

Regards,

~JG

Do rate helpful posts

Re: switch port port-security MAC-ADDRESS sticky

pradeepks1 — Wed, 28 Jan 2009 18:21:32 GMT

I am facing some issues with port-security in my network environment. The issue comes when we try to move users(PC/Phone) from one place to another in the same floor off course they belong to the same access switch.

The PC and phone does not connect even after we reset the port/clear the ARP/Mac-Address-Table.

also if try to manually bind the mac-address to the switch port it says : duplicate address" address already there message.

can any one share why this type of behavior and how to over come this problem.

Re: switch port port-security MAC-ADDRESS sticky

jafrazie — Thu, 29 Jan 2009 13:56:47 GMT

If you enable sticky, this binds the MAC to the port, regardless of aging, link-down, etc. If you want MACs to be able to move, don't use sticky.

Also, then I'd recommend aging to mitigate the issue of MACs moving around. Something else you might look into if you're running Cisco phones .. they can now send a switch a CDP update whenever phones unplug. This can immediately clear port-security state.

Hope this helps,

Re: switch port port-security MAC-ADDRESS sticky

hunnetvl01 — Sat, 14 Feb 2009 14:31:51 GMT

I am using AVAYA IP phones and have the same issue.

What should be used instead of sticky and why does it say that the max should be 3 if there are only 2 MACs bound to the interface of teh switch.

Thanks,

Vlad