5-23
Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide
OL-13270-06
Chapter 5 Administering the Switch
Managing the MAC Address Table
Disabling MAC Address Learning on a VLAN
By default, MAC address learning is enabled on all VLANs on the switch. You can control MAC address
learning on a VLAN to manage the available MAC address table space by controlling which VLANs,
and therefore which ports, can learn MAC addresses. Before you disable MAC address learning, be sure
that you are familiar with the network topology and the switch system configuration. Disabling MAC
address learning on a VLAN could cause flooding in the network.
Follow these guidelines when disabling MAC address learning on a VLAN:
•
Use caution before disabling MAC address learning on a VLAN with a configured switch virtual
interface (SVI). The switch then floods all IP packets in the Layer 2 domain.
•
You can disable MAC address learning on a single VLAN (for example,
no mac address-table
learning vlan 223
) or on a range of VLANs (for example,
no mac address-table learning vlan
1-10, 15
).
•
We recommend that you disable MAC address learning only in VLANs with two ports. If you
disable MAC address learning on a VLAN with more than two ports, every packet entering the
switch is flooded in that VLAN domain.
•
You cannot disable MAC address learning on a VLAN that is used internally by the switch. If the
VLAN ID that you enter is an internal VLAN, the switch generates an error message and rejects the
command. To view internal VLANs in use, enter the
show vlan internal usage
privileged EXEC
command.
•
If you disable MAC address learning on a VLAN configured as a private-VLAN primary VLAN,
MAC addresses are still learned on the secondary VLAN that belongs to the private VLAN and are
then replicated on the primary VLAN. If you disable MAC address learning on the secondary
VLAN, but not the primary VLAN of a private VLAN, MAC address learning occurs on the primary
VLAN and is replicated on the secondary VLAN.
•
You cannot disable MAC address learning on an RSPAN VLAN. The configuration is not allowed.
•
If you disable MAC address learning on a VLAN that includes a secure port, MAC address learning
is not disabled on that port. If you disable port security, the configured MAC address learning state
is enabled.
Beginning in privileged EXEC mode,
follow these steps to disable MAC address learning on a VLAN:
Command
Purpose
Step 1
configure terminal
Enter global configuration mode.
Step 2
no mac address-table learning vlan
vlan-id
Disable MAC address learning on the specified VLAN or VLANs. You
can specify a single VLAN ID or a range of VLAN IDs separated by a
hyphen or comma. Valid VLAN IDs are 1 to 4094. It cannot be an internal
VLAN.
Step 3
end
Return to privileged EXEC mode.
Step 4
show mac address-table learning
[
vlan
vlan-id
]
Verify the configuration.
Step 5
copy running-config startup-config
(Optional) Save your entries in the configuration file.
