Purpose
Command or Action
Defines the matching criteria to be used for mapping
ingress dot1q frames on an interface to the appropriate
service instance.
encapsulation dot1q vlan-id
Example:
Device(config-if-srv)# encapsulation dot1q 100
Step 5
Binds the service instance to a bridge- domain instance
where
bridge-id
is the identifier for the bridge- domain
instance.
bridge-domain bridge-id
Example:
Device(config-if-srv)# bridge-domain 200
Step 6
Adds the specified MAC address as a permit MAC address
for the service instance.
mac security address permit
mac-address
Example:
Device(config-if-srv)# mac security address
permit a2aa.aaaa.aaaa
Step 7
Adds the specified MAC address as a permitted MAC
address for the service instance.
mac security address permit
mac-address
Example:
Device(config-if-srv)# mac security address
permit a2aa.aaaa.aaab
Step 8
Adds the specified MAC address as a permitted MAC
address for the service instance.
mac security address permit
mac-address
Example:
Device(config-if-srv)# mac security address
permit a2aa.aaaa.aaac
Step 9
Adds the specified MAC address as a permitted MAC
address for the service instance.
mac security address permit
mac-address
Example:
Device(config-if-srv)# mac security address
permit a2aa.aaaa.aaad
Step 10
Adds the specified MAC address as a permitted MAC
address for the service instance.
mac security address permit
mac-address
Example:
Device(config-if-srv)# mac security address
permit a2aa.aaaa.aaae
Step 11
Enables MAC security on the service instance.
mac security
Example:
Device(config-if-srv)# mac security
Step 12
Layer 2 Configuration Guide for Cisco NCS 4200 Series
48
Configuring MAC Address Security on Service Instances and EVC Port Channels
Configuring a MAC Address Permit List
