Carrier Ethernet Configuration Guide (Cisco Asr 920 Series - Cisco ASR 920 Series Configuration Manual Ethernet Router

Configuring MAC Address Limiting on Service Instances Bridge Domains and EVC Port Channels
Command or Action
Step 4
service instance id
Example:
Device(config-if)# service instance 100 ethernet
Step 5 encapsulation dot1q vlan-id
Example:
Device(config-if-srv)# encapsulation dot1q 100
Step 6
bridge-domain bridge-id
Example:
Device(config-if-srv)# bridge-domain 200
Step 7 mac security address deny mac-address
Example:
Device(config-if-srv)# mac security address deny
a2aa.aaaa.aaaa
Step 8 mac security address deny mac-address
Example:
Device(config-if-srv)# mac security address deny
a2aa.aaaa.aaab
Step 9
mac security address deny mac-address
Example:
Device(config-if-srv)# mac security address deny
a2aa.aaaa.aaac
Step 10 mac security address deny mac-address
Example:
Device(config-if-srv)# mac security address deny
a2aa.aaaa.aaad
Step 11 mac security address deny mac-address
Example:
Device(config-if-srv)# mac security address deny
a2aa.aaaa.aaae
ethernet
Configuring a MAC Address Deny List
Purpose
Creates a service instance (an instance of an EVC) on an
interface and enters service instance configuration mode.
Defines the matching criteria to be used in order to map
ingress dot1q frames on an interface to the appropriate
service instance.
Binds the service instance to a bridge- domain instance
where bridge-id is the identifier for the bridge- domain
instance.
Adds the specified MAC address as a denied MAC address
for the service instance.
Adds the specified MAC address as a denied MAC address
for the service instance.
Adds the specified MAC address as a denied MAC address
for the service instance.
Adds the specified MAC address as a denied MAC address
for the service instance.
Adds the specified MAC address as a denied MAC address
for the service instance.

Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)

97