Cisco NCS 4200 Series - Page 5

Information About MAC Address Security on Service Instances and EVC Port Channels 38
Ethernet Virtual Circuits, Service Instances, and Bridge Domains 38
EVCs on Port Channels 38
MAC Security and MAC Addressing 38
MAC Address Permit List 38
MAC Address Deny List 39
Violation Response Configuration 40
MAC Address Aging Configuration 41
Sticky MAC Address Configurations 41
Aging for Sticky Addresses 42
Transitions 42
MAC Security Enabled on a Service Instance 42
MAC Security Disabled on a Service Instance 42
Service Instance Moved to a New Bridge Domain 42
Service Instance Removed from a Bridge Domain 42
Service Instance Shut Down Due to Violation 43
Interface Service Instance Down Linecard OIR Removed 43
Interface Service Instance Re-activated Linecard OIR Inserted 43
MAC Address Limit Decreased 43
Sticky Addresses Added or Removed on a Service Instance 43
How to Configure MAC Address Limiting on Service Instances Bridge Domains and EVC Port
Channels 43
Enabling MAC Security on a Service Instance 43
Enabling MAC Security on an EVC Port Channel 45
Configuring a MAC Address Permit List 47
Configuring a MAC Address Deny List 49
Configuring MAC Address Security on a Service Instance 51
Configuring a MAC Address Violation 53
Configuring MAC Address Aging 55
Configuring a Sticky MAC Address 56
Displaying the MAC Security Status of a Specific Service Instance 58
Displaying the Service Instances with MAC Security Enabled 59
Displaying the Service Instances with MAC Security Enabled on a Specific Bridge Domain 60
Showing the MAC Addresses of All Secured Service Instances 60
Showing the MAC Addresses of a Specific Service Instance 61
Layer 2 Configuration Guide for Cisco NCS 4200 Series
v
Contents