Many devices that support MAC filtering do so on a device basis. Whitelisted MAC addresses are allowed through any port on the device and blacklisted MAC addresses are blocked on all ports. Other devices, such as Cisco Catalyst switches, support MAC filtering on a port-by-port basis. This is referred to as port security. Port security may be configured statically with a list, dynamically based on the first given number of addresses detected, or a combination of these two methods. When port security is configured, the default settings are to allow only one MAC address per port, and to shut down the port if the allowed number of addresses is exceeded.2
Guide to General Server Security (PDF; 258 kB), National Institute of Standards and Technology, 2008-07-01, archived (PDF) from the original on 2017-08-09 http://csrc.nist.gov/publications/nistpubs/800-123/SP800-123.pdf ↩
"Configuring Port Security". Cisco. Retrieved 14 November 2015. http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/25ew/configuration/guide/conf/port_sec.html ↩