The authentication mac-move detect enable command enables a device to detect users' online status before user MAC address migration.
The undo authentication mac-move detect enable command disables a device from detecting users' online status before user MAC address migration.
By default, a device is disabled from detecting users' online status before user MAC address migration.
To prevent unauthorized users from spoofing online users to attack a device, run the authentication mac-move detect enable command to enable the device to detect users' online status before user MAC address migration. If no users are online, the device permits MAC address migration and allows users to go online from a new access interface. If a user is online, the device terminates MAC address migration and does not allow the user to go online from a new access interface.
You can also run the authentication mac-move detect retry-interval retry-time command to set the detection interval and maximum number of detections before user MAC address migration.