Cisco Catalyst 2960-XR User Manual

Enabling MAC Replace
MAC replace allows a host to replace an authenticated host on a port.
Beginning in privileged EXEC mode, follow these steps to enable MAC replace on an interface. This procedure
is optional.
SUMMARY STEPS
1.
configure terminal
2.
interface interface-id
3.
authentication violation {protect | replace | restrict | shutdown}
4.
end
5.
show running-config
6.
copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Specifies the port to be configured, and enter interface
configuration mode.
interface interface-id
Example:
Switch(config)# interface
Step 2
gigabitethernet2/0/2
Use the replace keyword to enable MAC replace on the interface.
The port removes the current session and initiates authentication
with the new host.
authentication violation {protect | replace |
restrict | shutdown}
Example:
Switch(config-if)# authentication violation
Step 3
The other keywords have these effects:
•
protect: the port drops packets with unexpected MAC
addresses without generating a system message.
replace
•
restrict: violating packets are dropped by the CPU and a
system message is generated.
•
shutdown: the port is error disabled when it receives an
unexpected MAC address.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
266 OL-29434-01
Configuring IEEE 802.1x Port-Based Authentication
Enabling MAC Replace

Cisco Catalyst 2960-XR Specifications

General

Stacking Bandwidth	80 Gbps
Layer Support	Layer 2 and Layer 3
Jumbo Frame Support	9198 bytes
RAM	512 MB
Input Voltage	100-240V AC
Model	Catalyst 2960-XR
Uplink Interfaces	4 x 1G SFP or 2 x 10G SFP+
Downlink Interfaces	24 or 48 x Gigabit Ethernet ports
Power Supply	Internal
MAC Address Table Size	16, 000 entries
PoE	Available on PoE models
Weight	4.5 kg
Features	energy efficiency
Stacking	Up to 8 switches
Operating Temperature	0 to 45°C