Cisco 2960X Port Security and Static MAC addresses

[DTC_]

Hello,

I'm having trouble understanding why I'm seeing so many static MAC address entries in my MAC table, when I have none configured on the interfaces themselves. I believe it is related to port security, but I'm unsure which aspect of the configuration is creating the static entries.

Port Configuration:

switchport access vlan 100
switchport mode access
switchport voice vlan 200
switchport port-security maximum 10
switchport port-security violation restrict
switchport port-security aging time 2
switchport port-security
priority-queue out
mls qos trust dscp
spanning-tree portfast edge
spanning-tree bpduguard enable

Output of show mac ad on the interface:

sh mac ad int gi1/0/20
Mac Address Table
-------------------------------------------

Vlan Mac Address      Type        Ports
---- ----------- -------- -----

200 0800.0fbb.85ee STATIC Gi1/0/20

Output of "show port-security address":

Vlan Mac Address Type Ports                   Remaining Age
(mins)
---- ----------- ---- ----- -------------
200 0800.0fbb.85ee SecureDynamic Gi1/0/20 1

Why is it that port-security address shows it as a Secure Dynamic entry, yet the switches mac address table shows it as a static mac address? The switch is on SW Version 15.2(6)E2 . Any insight is appreciated.

[balaji.bandi]

switchport port-security maximum 10  - the maximum number of secure MAC addresses on a port you set for 10MAC.

The port always learning as Dynamic.

Switch learns this address dynamically but it is showing as STATIC. This is the magic of sticky option, which we used with port security command. Sticky option automatically converts dynamically learned address in static address.

[DTC_]

Okay so the maximum 10 command implies the port has the stick option enabled? I was under the impression the sticky MAC learning was it's own line of configuration

[balaji.bandi · Accepted solution]

I have provided for both, so you can use what is purpose. yes 10 MAC address allowed as per the config.