mac secure
To configure MAC security at a port and to set the default action that is to be taken when security is violated,
use the mac secure command in the l2vpn bridge group bridge domain configuration mode. To disable MAC
security, use the no form of this command.
mac secure {action [none| shutdown| restrict]| logging| disable}
no mac secure {action [none| shutdown]| logging| disable}
Syntax Description
(Optional) Indicates the action to be taken when security is violated.action
Forwards the violating packet and allows the MAC address to be relearned.none
Shuts down the violating bridge port.shutdown
Drops the violating packet and disables the learn attempt.
The restrict keyword in applicable to interfaces
only.
Note
restrict
(Optional) Enables logging.logging
(Optional) Disables mac security.disable
Command Default
If a MAC address has been learned on a secure port and, a relearn attempt from another port (secure or not)
is made, the default action is restrict.
Command Modes
l2vpn bridge group bridge domain configuration
Command History
ModificationRelease
This command was introduced.Release 4.0.1
Usage Guidelines
This command has no keywords or arguments.
Task ID
OperationsTask ID
read, writel2vpn
Cisco ASR 9000 Series Aggregation Services Router VPN and Ethernet Services Command Reference, Release
6.1.x
279
Multipoint Layer 2 Services Commands
mac secure