does port security dynamically learn mac addresses without sticky

Port security uses the Source MAC address of Frames to any incoming port as verification of whether the device sending traffic is trusted, if the frame is deemed not from a trusted source the switch can take actions ranging from just alerting / logging the issue to shutting the port down (err-disable mode). Port-Security is configured on a Cisco switch, on a per interface level, which can all use different types of security (sticky, statically set, etc). If sticky learning is disabled, the sticky secure MAC addresses are converted to dynamic secure addresses and are removed from the running configuration.^^^Credit to for this picture I found I google images, I just love that picture in regards to Port-Security, I thought it was very fitting to open the section up here 🙂Īs mentioned, this information will be at the CCNA level of knowledge, so if you just passed your CCNA R/S you may want to move along to more advanced topic posts. If you do not save the configuration, they are lost. If you save the sticky secure MAC addresses in the configuration file, when the switch restarts, the interface does not need to relearn these addresses. The sticky secure MAC addresses do not automatically become part of the configuration file, which is the startup configuration used each time the switch restarts.

When you enter this command, the interface converts all the dynamic secure MAC addresses, including those that were dynamically learned before sticky learning was enabled, to sticky secure MAC addresses. To enable sticky learning, enter the switchport port-security mac-address sticky command. You can configure an interface to convert the dynamic MAC addresses to sticky secure MAC addresses and to add them to the running configuration by enabling sticky learning. This is also a good document explaing the difference

Does port security dynamically learn mac addresses without sticky