2-195
Catalyst 2950 and Catalyst 2955 Switch Command Reference
OL-10102-01
Chapter 2 Catalyst 2950 and 2955 Cisco IOS Commands
mac address-table static drop
mac address-table static drop
Use the mac address-table static drop global configuration command to enable unicast MAC address
filtering and to configure the switch to drop traffic with a specific source or destination MAC address.
Use the no form of this command to return to the default setting.
mac address-table static mac-addr vlan vlan-id drop
no mac address-table static mac-addr vlan vlan-id
Syntax Description
Defaults Unicast MAC address filtering is disabled. The switch does not drop traffic for specific source or
destination MAC addresses.
Command Modes Global configuration
Command History
Usage Guidelines Follow these guidelines when using this feature:
• Multicast MAC addresses, broadcast MAC addresses, and router MAC addresses are not supported.
Packets that are forwarded to the CPU are also not supported.
• If you add a unicast MAC address as a static address and configure unicast MAC address filtering,
the switch either adds the MAC address as a static address or drops packets with that MAC address,
depending on which command was entered last. The second command that you entered overrides the
first command.
For example, if you enter the mac address-table static mac-addr vlan vlan-id interface
interface-id global configuration command followed by the mac address-table static mac-addr
vlan vlan-id drop command, the switch drops packets with the specified MAC address as a source
or destination.
If you enter the mac address-table static mac-addr vlan vlan-id drop global configuration
command followed by the mac address-table static mac-addr vlan vlan-id interface interface-id
command, the switch adds the MAC address as a static address.
Examples This example shows how to enable unicast MAC address filtering and to configure the switch to drop
packets that have a source or destination address of c2f3.220a.12f4. When a packet is received in
VLAN 4 with this MAC address as its source or destination, the packet is dropped.
mac-addr Unicast source or destination MAC address. Packets with this MAC address are
dropped.
vlan vlan-id Specify the VLAN for which the packet with the specified MAC address is
received. The range is 1 to 4094.
Release Modification
12.1(19)EA1 This command was introduced.