Create Fdbentry Secure-Mac - Extreme Networks ExtremeWare Command Reference Manual

FDB Commands

create fdbentry secure-mac

create fdbentry secure-mac <mac_address> vlan <vlan name> ports <port-list>
Description
Specifies an authorized set of ports on which the specified MAC address will be permitted.
Syntax Description
mac_address Specifies a device MAC address, using colon-separated bytes.
vlan name Specifies a VLAN name associated with a MAC address.
port-list Specifies one or more ports. May be in the form 1, 2, 3-5, 2:*, 2:5, 2:6-2:8.
Default
N/A
Usage Guidelines
When secure MAC addresses are learned, they are aged out like other dynamically learned entries.
When a secure MAC address appears on a port/VLAN combination other than the one for which it is
configured, it is blackholed.
Configuring a secure MAC address for a port does not prevent the port from learning other MAC
addresses.
Example
The following command specifies that MAC address 00:0a:01:02:03:04 is permitted only on ports 1 and 2
in VLAN test:
create fdbentry secure-mac 00:0a:01:02:03:04 vlan test ports 1,2
History
This command was first available in ExtremeWare release 7.0 SR1.
Platform Availability
This command is available on all platforms.
410 ExtremeWare 7.5 Command Reference Guide