Cisco NCS 4200 Series - Page 7

86 pages

Save Page as PDF

To Next Page

To Previous Page

Example: Verifying Configured Static MAC Addresses on a Service Instance 74

CHAPTER 6

MAC Limiting 75

Restrictions and Usage Guidelines 75

Configuring MAC Limiting 75

Example of Enabling Per-Bridge-Domain MAC Limiting 76

Layer 2 Configuration Guide for Cisco NCS 4200 Series

vii

Contents

Main Page

Configuring Ethernet Dataplane Loopback9
Information on Ethernet Data Plane Loopback10
Qos Support for Ethernet Data Plane Loopback11
Stopping an Active Session12
Verifying Ethernet Data Plane Loopback13
Use Cases or Deployment Scenarios14
Configuring Switched Port Analyzer15
Restrictions for Local Span and RSPAN16
Understanding Local SPAN and RSPAN17
Local SPAN Traffic18
Destination Interface19
Traffic Directions20
Configuring Local SPAN and RSPAN23
Removing Sources or Destinations from a Local SPAN Session24
Configuring RSPAN Source Session25
Configuring RSPAN Destination Session27
Removing Sources or Destinations from a RSPAN Session28
Sample Configurations29
Configuration Example: Removing Sources or Destinations from a Local SPAN Session30
Prerequisites for Layer 2 Access Control Lists on Evcs33
Evcs34
Information about Layer 2 Access Control Lists on Evcs35
Applying a Layer 2 ACL to a Service Instance36
Configuring a Layer 2 ACL with Aces on a Service Instance37
Verifying the Presence of a Layer 2 ACL on a Service Instance39
Configuration Examples for Layer 2 Access Control Lists on Evcs40
Verifying the Presence of a Layer 2 ACL on a Service Instance41
Example Displaying the Details of a Layer 2 ACL on a Service Instance42
Prerequisites for MAC Address Security on Service Instances and EVC Port Channels45
Information about MAC Address Security on Service Instances and EVC Port Channels46
MAC Address Deny List47
Violation Response Configuration48
MAC Address Aging Configuration49
Aging for Sticky Addresses50
Service Instance Shut down Due to Violation51
Enabling MAC Security on an EVC Port Channel53
Configuring a MAC Address Permit List55
Configuring a MAC Address Deny List57
Configuring MAC Address Security on a Service Instance59
Configuring a MAC Address Violation61
Configuring MAC Address Aging63
Configuring a Sticky MAC Address64
Displaying the MAC Security Status of a Specific Service Instance66
Displaying the Service Instances with MAC Security Enabled67
Displaying the Service Instances with MAC Security Enabled on a Specific Bridge Domain68
Showing the MAC Addresses of a Specific Service Instance69
Showing the MAC Addresses of All Service Instances on a Specific Bridge Domain70
Showing the MAC Security Statistics of a Specific Service Instance71
Showing the Last Violation Recorded on each Service Instance on a Specific Bridge Domain72
Clearing All Dynamically Learned Secure MAC Addresses on a Service Instance73
Clearing All Dynamically Learned MAC Addresses on a Bridge Domain74
Configuration Examples for MAC Address Limiting on Service Instances and Bridge Domains and EVC Port Channels75
Example Configuring a MAC Address Deny List76
Example Configuring a Sticky MAC Address77
Example Displaying the MAC Security Statistics of All Service Instances78
Prerequsites for Static MAC Address Support on Service Instances79
Information about Static MAC Address Support on Service Instances80
Example for Configuring a Static MAC Address on a Service Instance81
Verifying Configured Static MAC Addresses on a Service Instance82
Restrictions and Usage Guidelines83
Example of Enabling Per-Bridge-Domain MAC Limiting84

Cisco NCS 4200 Series - Page 7

Table of Contents

Other manuals for Cisco NCS 4200 Series

Related product manuals