Port security: securing the port, or securing the MAC?

[omegaamigo]

When one assigns a MAC address to a port using something like:

set port security 2/1 enable <mac-address>

does this

(a) allow only this MAC address to connect to port 2/1 and no other MACs to connect to 2/1;

or

(b) allow this MAC address to connect only to this port 2/1 and not allow this MAC address to connect to any other port?

(a) and (b) are opposite ways of looking at a similar issue. The docs don't really make it clear which is happening ... yet this is an important distinction.

(a) is "defining a permitted MAC for a port"; (b) is "defining a permitted port for a MAC", I guess.

 

[Andyleates]

Answer a for me

Andy Leates MCSE CCNA MCP+I

 

[omegaamigo]

Thanks, Andyleates