When the value of <n> on a bridge domain is changed initially, a sanity check is performed to ensure that the
new value of <n> is greater than or equal to the sum of the number of permitted entries on all the secured
service instances on the bridge domain. If this sanity test fails, the command is rejected. The bridge domain
MAC address table (regardless of service instance) is scanned for dynamically learned (or sticky) addresses.
All dynamically learned addresses are removed when the new MAC address limit is less than the old MAC
address limit.
Sticky Addresses Added or Removed on a Service Instance
Existing dynamically learned MAC addresses remain unchanged. All new addresses learned become “sticky”
addresses.
Disabling sticky addresses causes all sticky secure MAC addresses on the service instance to be removed
from the MAC address table. All new addresses learned become dynamic addresses on the service instance
and are subject to aging.
How to Configure MAC Address Limiting on Service Instances
Bridge Domains and EVC Port Channels
Enabling MAC Security on a Service Instance
Perform this task to enable MAC address security on a service instance.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
interface type number
4.
service instance id ethernet
5.
encapsulation dot1q vlan-id
6.
bridge-domain bridge-id
7.
mac security
8.
end
DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode.enable
Step 1
Example:
Device> enable
•
Enter your password if prompted.
Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)
90
Configuring MAC Address Limiting on Service Instances Bridge Domains and EVC Port Channels
How to Configure MAC Address Limiting on Service Instances Bridge Domains and EVC Port Channels
To Next Page
Loading...
Need help?
General
