Switchport port-security sticky

How does sticky learning know when to stop? Do you just leave sticky on until you've gained an entry from each machine then turn it off?

interface FastEthernet0/2
switchport mode access
switchport port-security
switchport port-security mac-address sticky
switchport port-security mac-address 0200.2222.2222


Logically would only expect to see 1 mac address if the switch only connected to one pc but it's very possible that a switch connects to a hub which connects to more than one mac address.

By default, the maximum trusted MAC's on a port is one. You can adjust the maximum number of trusted MAC's per port with this command:

Switch(config-if)# switchport port-security maximum x

If you turn off sticky mac address filtering, you disable your port security.


Is this what you were asking about?

Yep it makes sense too.