Cisco Catalyst 9500

Configuring Unicast MAC Address Filtering
Follow these steps to configure the device to drop a source or destination unicast static address:
Procedure
PurposeCommand or Action
Enables privileged EXEC mode.enable
Step 1
Example:
• Enter your password if prompted.
Device> enable
Enters global configuration mode.configure terminal
Example:
Step 2
Device# configure terminal
Enables unicast MAC address filtering and
configure the device to drop a packet with the
mac address-table static mac-addr vlan
vlan-id drop
Step 3
specified source or destination unicast static
address.
Example:
Device(config)# mac address-table static
c2f3.220a.12f4 vlan 4 drop
• mac-addr—Specifies a source or
destination unicast MAC address (48-bit).
Packets with this MAC address are
dropped.
• vlan-id—Specifies the VLAN for which
the packet with the specified MAC address
is received. Valid VLAN IDs are 1 to
4094.
Returns to privileged EXEC mode.end
Example:
Step 4
Device(config)# end
Verifies your entries.show running-config
Example:
Step 5
Device# show running-config
(Optional) Saves your entries in the
configuration file.
copy running-config startup-config
Example:
Step 6
Device# copy running-config
startup-config
Monitoring and Maintaining Administration of the Device
PurposeCommand
Removes all dynamic entries.clear mac address-table dynamic
System Management Configuration Guide, Cisco IOS XE Amsterdam 17.2.x (Catalyst 9500 Switches)
36
Administering the Device
Configuring Unicast MAC Address Filtering