Go CCIE Go!! - A Cisco Certified Internetwork Expert

When you add the ’sticky’ keyword, you are essentially leaving the control to the Switch and asking the switch to secure the first mac-address it detects on that port.
There is no need to go further and append a mac-address to the sticky command; once the switch registers a mac-address on that port, it is going to create another command for you just like…..
’switchport port-security mac-address sticky 0000.0000.0000′
If this is a trunk port, and you increase the maximum secured mac-addresses on that port from the default of 1 to n, the switch will address all the ports that it discovered including their vlans to your configure:
e.g. configure
1 int fa0/1 switchport port-security switchport port-security maximum 3 switchport port-security mac-address sticky !
If all three mac-addresses come online and are detected by the switch, the next time you do ’show run’ you will see soomething like this in your config: ! int fa0/1 switchport port-security switchport port-security maximum 10 switchport port-security mac-address sticky switchport port-security mac-address sticky 0000.0000.0000 switchport port-security mac-address sticky 0000.0000.0000 vlan 1 switchport port-security mac-address sticky 0000.0000.0000 vlan 2 !
You can see that, it is different from:
switchport port-security mac-address 0000.0000.0002
Because, here you want to manually control the secured mac address.
HTH
Godswill Oletu CCIE #16464 (R&S)
—– Original Message —– From: “Suryakant P” To: “ccie forum” Sent: Sunday, June 08, 2008 11:51 AM Subject: Clarification on the Secure Addresses
> Hi All, > > Is there any difference in what the following two commands acheive on a > secure port or both are diffrerent approaches yielding same result. > > Switch(config-if)#* switchport port-security mac-address sticky* > > Switch(config-if)#* switchport port-security mac-address sticky > 0000.0000.0002* > > *or* > > Switch(config-if)# *switchport port-security mac-address 0000.0000.0002* > > ** > > In my understanding,both commands add the specified address to the > mac-table and running configuration ?Am I right or missing something > here? > > > > Thanks > > With regards > > Suryakant > > > > ** > > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html