To protect the lobby PC, we would set the maximum allowed MAC addresses to 1 and
the violation to restrict so the port didn’t get shut down every time someone tried to use
the Ethernet cable (which would be constantly). By using violation restrict, the unauthorized
frames would just be dropped. But did you notice that I enabled port-security
and then set a static MAC address? Remember that as soon as you enable port-security
on a port, it defaults to violation shutdown and a maximum of 1. So all I needed to do
was change the violation mode and add the static MAC address and our business requirement
is solidly met!