Do hosts that violate port-security show up in the mac-address table, or is this only in the logs? What would the log entry look like that has the violating address? We're on Cisco 2960X.

  • I'm using "protect" mode, but I'm assuming that it's the same for all options. – Yanzzee Oct 26 '17 at 16:39

Error Logs are generated such as:


The port status is also changed from Secure-Up to Secure-Down.


Port security learns unauthorized MAC addresses with a bit set that causes traffic to them or from them to be dropped. The show mac-address-table command displays the unauthorized MAC addresses, but does not display the state of the bit. (CSCeb76844)

  • So I could just show mac address-table on the ports with port security and still see any extra addresses, right? – Yanzzee Oct 26 '17 at 19:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.