Port security limits the number of MAC addresses per switch port — preventing MAC flooding and unauthorized devices from connecting.
Sticky learning: port remembers and locks in the first MAC address(es) seen. Violation actions: shutdown (most secure), restrict (drop + log), protect (drop silently). Doesn't replace 802.1X — MAC addresses are spoofable. Use both.