Example Configuring a Sticky MAC Address
Device> enable
Device# configure terminal
Device(config)# interface gigabitethernet 3/0/1
Device(config-if)# service instance 100 ethernet
Device(config-if-srv)# encapsulation dot1Q 100
Device(config-if-srv)# bridge-domain 100
Device(config-if-srv)# mac security sticky address 1111.2222.3333
Device(config-if-srv)# mac security
Example Displaying the MAC Addresses on a Specific Secure Service Instance
Device# show ethernet service instance id 10 inter gig 0/0/3 mac security
address Bridge-domain 10
MAC Address Type
0000.00ac.ef02 sticky
0000.00ac.ef03 sticky
0001.0001.aaaa dynamic
0001.0001.aaab dynamic
Example Displaying the Last Violation on a Specific Service Instance
Device# show bridge-domain 100 mac security last violation Te0/0/3 ServInst 200
Last violation at: 15:54:25 IST Fri Jun 5 2015
Source MAC address: 0000.1111.1111
Reason: Re-learn attempt
Total violation count: 321
Example Displaying the MAC Security Status of a Specific Service Instance
Device# show ethernet service instance id 100 interface te0/0/3 mac security
Bridge-domain 100
MAC Security enabled: yes
Example Displaying the MAC Addresses of All Secured Service Instances
Device# show ethernet service instance mac security address
Port Bridge-domain MAC Address Type
Gi0/0/3 ServInst 10 10 0000.00ac.ef02 sticky
Gi0/0/3 ServInst 10 10 0000.00ac.ef03 sticky
Gi0/0/3 ServInst 10 10 0000.00ac.ef04 dynamic
Gi0/0/3 ServInst 10 10 0000.00ac.ef05 dynamic
Gi0/0/3 ServInst 10 10 0000.00ac.ef06 sticky
Gi0/0/3 ServInst 10 10 0000.00ac.ef07 dynamic
Gi0/0/3 ServInst 10 10 0000.00ac.ef08 dynamic
Gi0/0/3 ServInst 10 10 0000.00ac.ef09 dynamic
Gi0/0/3 ServInst 10 10 0000.00ac.ef0a dynamic
Gi0/0/3 ServInst 10 10 0000.00ac.ef0b dynamic
Layer 2 Configuration Guide for Cisco NCS 4200 Series
69
Configuring MAC Address Security on Service Instances and EVC Port Channels
Example Configuring a Sticky MAC Address