Carrier Ethernet Configuration Guide (Cisco Asr 920 Series - Cisco ASR 920 Series Configuration Manual Ethernet Router

Configuring a MAC Address Violation
Command or Action
Step 3
interface type number
Example:
Device(config)# interface gigabitethernet2/0/1
Step 4 service instance id
Example:
Device(config-if)# service instance 100
ethernet
Step 5 encapsulation dot1q vlan-id
Example:
Device(config-if-srv)# encapsulation dot1q 100
Step 6 bridge-domain bridge-id
Example:
Device(config-if-srv)# bridge-domain 100
Step 7 Do one of the following:
• mac security violation restrict
• mac security violation protect
Example:
Device(config-if-srv)# mac security violation
restrict
Example:
Device(config-if-srv)# mac security violation
protect
Step 8
mac security
Example:
Device(config-if-srv)# mac security
Step 9 end
Example:
Device(config-if-srv)# end

Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)

102
Configuring MAC Address Limiting on Service Instances Bridge Domains and EVC Port Channels
ethernet
Purpose
Specifies the interface type and number, and enters interface
configuration mode.
Creates a service instance (an instance of an EVC) on an
interface and enters service instance configuration mode.
Defines the matching criteria to be used to map ingress dot1q
frames on an interface to the appropriate service instance.
Binds the service instance to a bridge- domain instance where
bridge-id is the identifier for the bridge- domain instance.
Sets the violation mode (for Type 1 and 2 violations) to
restrict.
or
Sets the violation mode (for Type 1 and 2 violations) to
protect.
• If a MAC security violation response is not specified,
by default, the violation mode is shutdown.
Enables MAC security on the service instance.
Returns to user EXEC mode.