MAC Address security- Uses a static or dynamic list of MAC addresses. Frames that are received with an address not on the list are dropped. Port security can not run on a trunk port.
Switchport port-security - enables port security on the port
Aging-
Maximum- Maximum secure MAC addresses the port can learn- between 1-6144
MAC-addresses- Static secure or sticky secure. Static is set by user.
Violation- determines action taken when invalid MAC source is received. All options will drop the frame.
Dynamic addresses are learned addresses as frames come in
Sticky address- Dynamic addresses that stay even if the port or switch is shutdown.
ErrDisable recovery- Enables automatic recovery from an err-disable state. Doesn't resolve the actual issue just enables the port, Global command not port based.
Cause- What is causing the err-disable
Interval- Default interval is 300 seconds.
sh errdisable recovery- Shows what is enabled.