How to port security with dynamically learned mac addresses