Purpose
Command or Action
Specifies the interface type and number, and enters
interface configuration mode.
interface type number
Example:
Device(config)# interface gigabitethernet2/0/1
Step 3
Creates a service instance (an instance of an EVC) on an
interface and enters service instance configuration mode.
service instance id
ethernet
Example:
Device(config-if)# service instance 100 ethernet
Step 4
Defines the matching criteria to be used in order to map
ingress dot1q frames on an interface to the appropriate
service instance.
encapsulation dot1q vlan-id
Example:
Device(config-if-srv)# encapsulation dot1q 100
Step 5
Binds the service instance to a bridge- domain instance
where
bridge-id
is the identifier for the bridge- domain
instance.
bridge-domain bridge-id
Example:
Device(config-if-srv)# bridge-domain 200
Step 6
Adds the specified MAC address as a denied MAC address
for the service instance.
mac security address deny mac-address
Example:
Device(config-if-srv)# mac security address deny
a2aa.aaaa.aaaa
Step 7
Adds the specified MAC address as a denied MAC address
for the service instance.
mac security address deny mac-address
Example:
Device(config-if-srv)# mac security address deny
a2aa.aaaa.aaab
Step 8
Adds the specified MAC address as a denied MAC address
for the service instance.
mac security address deny mac-address
Example:
Device(config-if-srv)# mac security address deny
a2aa.aaaa.aaac
Step 9
Adds the specified MAC address as a denied MAC address
for the service instance.
mac security address deny mac-address
Example:
Device(config-if-srv)# mac security address deny
a2aa.aaaa.aaad
Step 10
Layer 2 Configuration Guide for Cisco NCS 4200 Series
50
Configuring MAC Address Security on Service Instances and EVC Port Channels
Configuring a MAC Address Deny List
