Hi,
The loss is depends upon the violation mode configured.
You can configure the interface for one of three violation modes, based on the action to be taken if a violation occurs:
protect?when the number of secure MAC addresses reaches the maximum limit allowed on the port, packets with unknown source addresses are dropped until you remove a sufficient number of secure MAC addresses to drop below the maximum value.
restrict?a port security violation restricts data and causes the SecurityViolation counter to increment. It also sends an SNMP trap when an address-security violation occurs.
shutdown?the interface is error-disabled when a security violation occurs. When a secure port is in the error-disabled state, you can bring it out of this state by entering the errdisable recovery cause psecure-violation global configuration command, or you can manually re-enable it by entering the shutdown and no shutdown interface configuration commands. This is the default mode.
You can set the required mode by,
switchport port-security violation {protect | restrict | shutdown
Default is in shutdown mode. The interface is error-disabled when a security violation occurs
Rate if it does,
Rgs
