Cisco ASR 920 series

CHAPTER 7 Configuring MAC Address Limiting on Service Instances Bridge Domains and EVC Port
Channels 81
Finding Feature Information 81
Prerequisites for MAC Address Limiting on Service Instances Bridge Domains and EVC Port
Channels 82
Restrictions for MAC Address Limiting on Service Instances Bridge Domains and EVC Port
Channels 82
Information About MAC Address Limiting on Service Instances Bridge Domains and EVC Port
Channels 82
Ethernet Virtual Circuits, Service Instances, and Bridge Domains 82
EVCs on Port Channels 83
MAC Security and MAC Addressing 83
MAC Address Permit List 83
MAC Address Deny List 84
MAC Address Limiting and Learning 84
Static and Dynamic MAC Addresses 85
Dynamic MAC Address Learning 85
MAC Address Limiting on Service Instances 85
MAC Address Limiting for Bridge Domains 85
Relationship Between the MAC Address Limit on a Bridge Domain and on a Service
Instance 85
MAC Move and MAC Locking 86
Violation Response Configuration 86
MAC Address Aging Configuration 87
Sticky MAC Address Configurations 88
Aging for Sticky Addresses 88
Transitions 88
MAC Security Enabled on a Service Instance 88
MAC Security Disabled on a Service Instance 89
Service Instance Moved to a New Bridge Domain 89
Service Instance Removed from a Bridge Domain 89
Service Instance Shut Down Due to Violation 89
Interface Service Instance Down Linecard OIR Removed 89
Interface Service Instance Re-activated Linecard OIR Inserted 89
Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)
vii
Contents