Trunk group exclusion

Port security does not operate on either a static or dynamic trunk group. If you configure port security on one or more ports that are later added to a trunk group, the switch resets the port security parameters for those ports to the factory default configuration. Ports configured for either Active or Passive LACP, and which are not members of a trunk, can be configured for port security.