@RonMaupin @YLearn Any idea why when I plug in one switch on an access port to another switch to an access port my port security is disabling the port even when it has the base mac address set as allowed on that port for the switch connected?

@JukEboX That is because the switches will send broadcast frames from all the connected hosts. In fact, the frames sent between switches only have the host MAC addresses, not the switch MAC addresses on them. Remember that switches are transparent devices, and broadcast, multicast, and unknown unicast frames are sent to all other interface than the interfaces where the frames entered the switch.

@RonMaupin so how do I set port security to allow that switch to be connected to that port ?

@JukEboX You do not use port security where you will get frames with many MAC addresses. That would include trunks and interfaces where you connect other switches or hubs. I would also tell you that the best practice is that switch-to-switch connections should only be trunks, not access interfaces. You can limit the VLANs allowed on the trunk, even to a single VLAN, but there are commands (e.g. portfast and bpduguard) that affect access interface and not trunks by default.

You do not want the enable portfast and bpduguard between switches. Also, you really want to avoid access switch-to-switch connections. Access switches should only be connected to distribution switches, not other access switches.