16-7
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
—
Release 8.1
78-15486-01
Chapter 16 Configuring Port Security
Configuring Port Security on the Switch
Enabling MAC Address Notification
Enabling MAC address notification allows you to monitor MAC addresses at the module and port level
that were added by the switch or removed from the CAM table.
A new MAC address is added when either of the following occurs:
•
When a packet is received from a new device on one of the ports of the switch with a new source
address
•
When the MAC address is added to the CAM table by the CLI
A MAC address is removed from the CAM table when one of the following is true:
•
When the MAC address receives no packets during the time-out period
•
When the switch invalidates a CAM table entry and replaces the entry with a new one
•
When the MAC address is removed from the CAM table by the CLI
Note
MAC address notification settings are ignored on PAgP and LACP EtherChannel ports.
To enable MAC address notification globally, perform this task in privileged mode:
MAC addresses are stored in memory between notifications. To set the interval time between
notifications and verify the configuration, perform this task in privileged mode:
If the set cam notification interval is set to 0, the switch will send notification immediately. If the
notifications are sent immediately, they will have an impact on the performance of the switch.
You can generate SNMP traps whenever a MAC address change occurs; do so by enabling the commands
set snmp trap enable macnotification, set cam notification, and set cam notification historysize.
To set the SNMP trap MAC address notification, perform this task in privileged mode:
Task Command
Step 1
Enable MAC address notification globally.
set cam notification {enable | disable}
Step 2
Set the history log size.
set cam notification historysize log_size
Step 3
Enable notification of added MAC addresses.
set cam notification added {enable | disable}
mod/port
Step 4
Enable notification of removed MAC addresses.
set cam notification removed {enable | disable}
mod/port
Step 5
Verify the configuration.
show cam notification all
Task
Command
Step 1
Set the interval time between notifications.
set cam notification interval time
Step 2
Verify the configuration.
show cam notification all
Task
Command
Set the SNMP traps on the system.
set snmp trap enable macnotification
