If users connected to a switch change frequently, you can configure port security to convert dynamic MAC addresses into sticky MAC addresses. In this way, when users change, the old bound MAC address entries can be aged out in a timely manner.
Sticky MAC addresses are not aged out automatically. Once a MAC address is converted to sticky, it is bound to the port and does not age out like dynamic MAC addresses unless manually cleared or the configuration is removed.
If the goal is to allow MAC entries to age out when users change frequently, dynamic MAC addresses (not sticky) should be used.
✅ Official Reference from Huawei:
" Sticky MAC addresses are retained across restarts and do not age out. To allow MAC addresses to time out and be relearned, do not use sticky configuration. "
— [Huawei HCIA-Datacom Certification Guide – Port Security Section]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit