#Cisco mac address aging time mac#

MAC address spoofing is an attack which will cause disruption by bouncing the MAC address table among two or more ports. The MAC address table of the switch will only allow a single MAC address on a single port so that it knows, in a deterministic manner, to which port it should send traffic with that destination address. VLAN, applies the configured violation mode. If traffic with a secure MAC address that is configured or learned on one secure port attempts to access another secure port in the same That defeats the purpose of one aspect of port security:

Like Ron says in his response, you will want to have port-security to dynamically learn (sticky) the MAC addresses, possible set a max amount to learn on each interface, and configure the aging parameters to what best suits you. Inactivity Aging based on inactivity time period When you set your aging parameters you have several options, you can have it based on time, or type, or statically set: switchport port-security Aging time ? Static Enable aging for configured secure addresses Then for each interface set the aging timers: switchport port-security aging ? You can set how many MAC Address's you want each interface to learn: switchport port-security maximum ?

As stated above, it defeats the purpose of port-security.ДЇor each interface you can configure it to dynamically learn the mac with: switchport port-security mac-address sticky You wont be able to have port security configured and at the same time allow a MAC to move from interface to interface without problems. You probably will want to look into port-security sticky (dynamically learns the MAC) then configure aging to age out old MAC Addresses on each interface.