lost connection to printer after enable sticky mac on printer's port

[Kave]

when I enable sticky mac on printer I will be lost ping to it.  just printer connected to port and nothing connected to the same port.

[BrechtSchamp]

Does the MAC address of the printer appear in the list? Did you manually add it, or did you let it get added automatically?

[Kave]

i let the machine learn MAC from the printer, after I set MAC manually it is working.

[antonis_sp]

Once you enable sticky mac, check on the switch port config if the mac of the printer is added on the whitelist.

If you do not see the mac of the printer added, check with another device (laptop).

If you see a mac added, check if it is the same with the printer. If it is not, delete it so that it can be automatically populated again.

[PhilipDAth]

I'm thinking this might be because the printer is not generating any traffic for the switch to learn.  Try giving the printer a power cycle after enabling this feature and hopefully it will at least send out an ARP packet so the switch has something to learn.

Otherwise manually enter the MAC address.

[BrechtSchamp]

---

@PhilipDAth wrote:

I'm thinking this might be because the printer is not generating any traffic for the switch to learn.  Try giving the printer a power cycle after enabling this feature and hopefully it will at least send out an ARP packet so the switch has something to learn.

Otherwise manually enter the MAC address.

---

I thought about that too. Is the port completely shut off before the endpoint sends something?

If not, even if the printer is passive, it should still get the broadcasted ARP request that precedes the pings. And when it does its reply should populate the sticky MAC list if there's free space, right?

[PhilipDAth]

>If not, even if the printer is passive, it should still get the broadcasted ARP request that precedes the pings. And when it does its reply should populate the sticky MAC list if there's free space, right?

To the best of my knowledge, traffic is not forward to a port-security port (Cisco Enterprise or Meraki) unless it has something in its MAC address list.  This is consistent with the behaviour of stopping a random person plugging in a machine and not being able to see anything.

[Kave]

I let the MS's Port learn MAC from the printer, so it did not work, after I set MAC manually it is working.

looks like Printer does send ARp because i can see the Printer MAC when i check the details of the port, but MS port Security Can not catch it automatically.