Purpose
Command or Action
Adds the specified MAC address as a denied MAC address
for the service instance.
mac security address deny mac-address
Example:
Device(config-if-srv)# mac security address deny
a2aa.aaaa.aaae
Step 11
Enables MAC security on the service instance.
mac security
Example:
Device(config-if-srv)# mac security
Step 12
Returns to user EXEC mode.
end
Example:
Device(config-if-srv)# end
Step 13
Configuring MAC Address Security on a Service Instance
Perform this task to configure an upper limit for the number of secured MAC addresses allowed on a service
instance. This number includes addresses added as part of a permit list as well as dynamically learned MAC
addresses. If the upper limit is decreased, all learned MAC entries are removed.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
interface type number
4.
service instance id
ethernet
5.
encapsulation dot1q vlan-id
6.
bridge-domain bridge-id
7.
mac security maximum addresses maximum-addresses
8.
mac security
9.
end
DETAILED STEPS
Purpose
Command or Action
Enables privileged EXEC mode.
enable
Step 1
Layer 2 Configuration Guide for Cisco NCS 4200 Series
51
Configuring MAC Address Security on Service Instances and EVC Port Channels
Configuring MAC Address Security on a Service Instance
