118 
16.7  mac address-table security 
Description 
The mac address-table security  command is used to configure security of 
the MAC address table in a specified VLAN.   
Syntax 
mac address-table security vid 
vid
max-learn 
number
  { forward | drop | 
disable } 
Parameter 
vid 
—— Speicify the VLAN ID to configure its MAC address table. 
number 
—— Configure the threshold of the MAC address table in this VLAN. It 
ranges from 0 to 16383. 
forward | drop | disable
 
——  Choose the mode when learned MAC number 
exceeds the threshold of the MAC address table in this VLAN.   
•  Drop: The packets will be dropped when learned MAC number exceeds 
the threshold of the MAC address table in this VLAN.. 
•  Forward: The packets will be forward but not be learned when learned 
MAC number exceeds the threshold of the MAC address table in this 
VLAN.. 
•  Disable: The threshold of the MAC address table is disabled. 
Command Mode 
Global Configuration Mode 
Privilege Requirement 
Only Admin, Operator and Power User level users have access to these 
commands. 
Example 
Configure the max learned MAC address number is VLAN 2 as 1000, and drop 
the packets that have no match in the MAC address table: 
T1600G-52TS(config)#  mac address-table  security vid  2  max-learn  1000 
drop