A read-create value, 1 to 4096, setting the maximum number of MAC addresses this learning profile is allowed to learn, which must be greater than or equal to the profile's watermark count. This caps how many devices can be learned on interfaces using this profile, protecting against MAC flooding or unauthorized device proliferation on a port. An admin securing an access port expecting only a handful of devices might set this to 5, so a sixth unexpected MAC triggers the configured security action.