When enabled, additional checks are performed during evaluation of MAC address-based policies to ensure that they are only applied to the port if only a single MAC address has been learned or where the MAC that is matched by the policy represents the directly connected device. When disabled, MAC address-based policies are more freely applied to the port on which there exists MAC address data matching policy criteria. The global cnAutoAttachRestrictedMacMatch status must be 'enabled(1)' for the value of this port- specific setting to be honored. If the global status is 'disabled(2)', the value of this object is ignored.