Dell S50V Switch User Manual


  Open as PDF
of 1262
 
564 | Layer 2
www.dell.com | support.dell.com
mac learning-limit no-station-move
The no-station-move option, also known as “sticky MAC,” provides additional port security by
preventing a station move. When this option is configured, the first entry in the table is maintained instead
of creating a new entry on the new interface.
no-station-move is the default behavior. Entries created before
this option is set are not affected.
mac learning-limit sticky
The sticky-MAC learning feature is supported on platforms: c s.
You can provide security for the dynamically-learned MAC addresses of trusted devices that are allowed to
access a port by configuring the
sticky option. This MAC learning option allows a switch to maintain the
association of a trusted MAC address with a port and prevents a device from accessing the switch on
another interface until the option is disabled.
Trusted MAC addresses are added to the running configuration and “stick” to the port on which they are
learned even if an interface goes down and comes back up. If you save sticky MAC addresses to the
start-up configuration file by entering the
write config command, the addresses are deleted from the
running-configuration, do not have to be dynamically relearned, and do not change when the switch
reboots. Any sticky MAC addresses learned after the
write config is performed are not saved after a reboot.
The sticky MAC address option is supported on physical port and port-channel interfaces; it is not
supported on VLAN interfaces.
Static MAC addresses have a higher preference than sticky MAC addresses and are therefore not converted
with sticky-MAC learning.
Note: Sticky MAC is not supported on the S25 or S50 in FTOS release 8.4.2.6.
FTOS Behavior: The C-Series and S-Series do not generate a station-move violation log entry for
physical interfaces or port-channels when you configure mac learning-limit or when you configure mac
learning-limit
station-move-violation log. FTOS detects a station-move violation only when you
configure mac learning-limit dynamic, and logs the violation only when you configure the mac
learning-limit station-move-violation log
, as shown below:
FTOS(conf-if-gi-1/1)#show config
!
interface GigabitEthernet 1/1
no ip address
switchport
mac learning-limit 1 dynamic no-station-move
mac learning-limit station-move-violation log
no shutdown
Note: Sticky MAC is not supported on the S25 or S50 in FTOS release 8.4.2.6.