MAC Address Limit Decreased 89
Sticky Addresses Added or Removed on a Service Instance 90
How to Configure MAC Address Limiting on Service Instances Bridge Domains and EVC
Port Channels 90
Enabling MAC Security on a Service Instance 90
Enabling MAC Security on an EVC Port Channel 92
Configuring a MAC Address Permit List 93
Configuring a MAC Address Deny List 96
Configuring MAC Address Limiting on a Bridge Domain 98
Configuring MAC Address Limiting on a Service Instance 99
Configuring a MAC Address Violation 101
Configuring MAC Address Aging 103
Configuring a Sticky MAC Address 104
Displaying the MAC Security Status of a Specific Service Instance 106
Displaying the Service Instances with MAC Security Enabled 107
Displaying the Service Instances with MAC Security Enabled on a Specific Bridge
Domain 108
Showing the MAC Addresses of All Secured Service Instances 108
Showing the MAC Addresses of a Specific Service Instance 109
Showing the MAC Addresses of All Service Instances on a Specific Bridge Domain 110
Showing the MAC Security Statistics of a Specific Service Instance 110
Showing the MAC Security Statistics of All Service Instances on a Specific Bridge
Domain 111
Showing the Last Violation Recorded on Each Service Instance on a Specific Bridge
Domain 112
Clearing All Dynamically Learned MAC Addresses on a Service Instance 113
Clearing All Dynamically Learned MAC Addresses on a Bridge Domain 114
Configuration Examples for MAC Address Limiting on Service Instances and Bridge Domains
and EVC Port Channels 115
Example Enabling MAC Security on a Service Instance 115
Example Enabling MAC Security on an EVC Port Channel 115
Example Configuring a MAC Address Permit List 115
Example Configuring a MAC Address Deny List 116
Example Configuring MAC Address Limiting on a Bridge Domain 116
Example Configuring a MAC Address Limit on a Service Instance 116
Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)
viii
Contents