6-18
Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide
78-6511-08
Chapter 6 Configuring the System
Managing the MAC Address Tables
This example shows how to specify 172.20.10.10 as the NMS, enable the switch to send MAC address
notification traps to the NMS, enable the MAC address notification feature, set the interval time to 60
seconds, set the history-size to 100 entries, and enable traps whenever a MAC address is added on Fast
Ethernet interface 0/4.
Switch(config)# snmp-server host 172.20.10.10
Switch(config)# snmp-server enable traps mac-notification
Switch(config)# mac-address-table notification interval 60
Switch(config)# mac-address-table notification history-size 100
Switch(config)# interface fastethernet0/4
Switch(config-if)# snmp trap mac-notification added
You can verify the previous commands by entering the show mac-address-table notification privileged
EXEC command.
Adding Secure Addresses
The secure address table contains secure MAC addresses and their associated ports and VLANs. A
secure address is a manually entered unicast address that is forwarded to only one port per VLAN. If you
enter an address that is already assigned to another port, the switch reassigns the secure address to the
new port.
You can enter a secure port address even when the port does not yet belong to a VLAN. When the port
is later assigned to a VLAN, packets destined for that address are forwarded to the port.
Beginning in privileged EXEC mode, follow these steps to add a secure address:
Removing Secure Addresses
Beginning in privileged EXEC mode, follow these steps to remove a secure address:
You can remove all secure addresses by using the clear mac-address-table secure command in
privileged EXEC mode.
Command
Purpose
Step 1
configure terminal
Enter global configuration mode.
Step 2
mac-address-table secure hw-addr
interface vlan vlan-id
Enter the MAC address, its associated port, and the VLAN ID.
Step 3
end
Return to privileged EXEC mode.
Step 4
show mac-address-table secure
Verify your entry.
Command
Purpose
Step 1
configure terminal
Enter global configuration mode.
Step 2
no mac-address-table secure
hw-addr vlan vlan-id
Enter the secure MAC address, its associated port, and the VLAN ID to be
removed.
Step 3
end
Return to privileged EXEC mode.
Step 4
show mac-address-table secure
Verify your entry.
