Static mac entries - can they be aged?

[srego4]

I want to enable port security on my access switches (3560) with a limit of 1 mac addresses / port. I can do this fine. However, if I have a hub or a switch connected to my main switch and an end user device connected to this extended hub / switch, the mac address becomes 'static'.

Now if this end user device is plugged anywhere else on my main switch, it gets disabled as the main switch already has this mac  in its cam table as a static entry. I can only use the end user device on antother port if I clear the mac address table.

So my question is, Is there a way to age static entries in the mac tables?

Thanks,

[cadet alain · Accepted solution]

Hi,

a secure MAC can't become 'static' if it hasn't been configured so and by default static secure don't age out but you can make them age out indeed.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_25_se/configuration/guide/swtrafc.html#wp1042259

Regards.

Alain.

[srego4]

thanks alain.  that worked just fine for what I wanted.