Differenece bw sticky mac-add vs setting static secure MAC-add vs Switchport port-security maximum 1

[ITexpert]

Hello Guys,

@Daniele Giordano  @Georg Pauwen  @Joseph W. Doherty @Reza Sharifi @paul driver

My goal is to achieve is that port learn mac-address but then commit to that Mac address, so if i change end device it gets err-disabled.

Thanks

[Daniele Giordano]

Hi, you can try to use port-security feature.

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/25ew/configuration/guide/conf/port_sec.html

Regards.

[ITexpert]

Hello @Daniele Giordano

I tried with port-security and it works but my answer is still not complete.

Then whats the difference of using other commands ?

Thanks

[Seb Rupik · Accepted solution]

Hi there,

The switchport port-security max 1 will limit the number of MAC addresses permitted concurrently on a switchport.

Using sticky mac will allow the switch to learn the MAC addresses permitted. Obviously it will only learn a MAC address whilst the maximum number has not been exceed.

static secure allows an administrator to manually define the permitted MAC addresses on a switchport.

cheers,

Seb.

[Pamarthy]

The main difference is at the time of port security you give the MAC address manually or assigning directly by using command sticky, this command allowed the MAC address to which the port is connected right now directly. This mainly helps for the semi big networks which have more than 25 switchs because for every port to copy the MAC address and assign at the time of port security is a big task because of each switch have 24 ports.