DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Enters interface configuration mode for the Ethernet or
port-channel interface that you want to configure with port
security.
Enter one of the following commands:
Step 2
•
interface ethernet slot
/
port
•
interface port-channel channel-number
Example:
switch(config)# interface ethernet 2/1
switch(config-if)#
Configures the interface as a Layer 2 interface.
switchport
Example:
Step 3
switch(config-if)# switchport
Enables port security on the interface. The
no
option
disables port security on the interface.
[
no
]
switchport port-security
Example:
Step 4
switch(config-if)# switchport port-security
Displays the port security configuration.
(Optional)
show running-config port-security
Example:
Step 5
switch(config-if)# show running-config
port-security
Copies the running configuration to the startup
configuration.
(Optional)
copy running-config startup-config
Example:
Step 6
switch(config-if)# copy running-config
startup-config
Enabling or Disabling Sticky MAC Address Learning
You can disable or enable sticky MAC address learning on an interface. If you disable sticky learning, the
device returns to dynamic MAC address learning on the interface, which is the default learning method.
By default, sticky MAC address learning is disabled.
Before you begin
You must have enabled port security globally.
SUMMARY STEPS
1.
configure terminal
2.
Enter one of the following commands:
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
313
Configuring Port Security
Enabling or Disabling Sticky MAC Address Learning
