Configuring port security ACI

[oscar.cuevas1]

Hi everybody
I've a question.
Is possible configure a type Mac Sticky on the LEAF's ports ?

Because, I'm searching but only found is bandwidth configuration on port

And in the documentation shows "static endpoint" but when configuring the MAC and conect other pc with other MAC, this still pinging the default gateway.

Regards

[Julio E. Moisa]

Hi Oscar

No, port security is not supported under leaf switchports

Port Security Guidelines and Restrictions

The guidelines and restrictions are as follows:

• Port security is available per port.

• Port security is supported for physical ports, port channels, and virtual port channels (vPCs).

• Static and dynamic MAC addresses are supported.

• MAC address moves are supported from secured to unsecured ports and from unsecured ports to secured ports.

• The MAC address limit is enforced only on the MAC address and is not enforced on a MAC and IP address.

• Port security is not supported with the Fabric Extender (FEX).

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/b_Cisco_APIC_Security_Configuration_Guide/b_Cisco_APIC_Security_Guide_chapter_0101.html