Mac Address-Table Static Drop - Cisco Catalyst 2950 Command Reference Manual

Chapter 2 Catalyst 2950 and 2955 Cisco IOS Commands

mac address-table static drop

Use the mac address-table static drop global configuration command to enable unicast MAC address
filtering and to configure the switch to drop traffic with a specific source or destination MAC address.
Use the no form of this command to return to the default setting.
Syntax Description
mac-addr
vlan vlan-id
Defaults
Unicast MAC address filtering is disabled. The switch does not drop traffic for specific source or
destination MAC addresses.
Command Modes
Global configuration
Command History Release
12.1(19)EA1
Usage Guidelines
Follow these guidelines when using this feature:
•
•
Examples
This example shows how to enable unicast MAC address filtering and to configure the switch to drop
packets that have a source or destination address of c2f3.220a.12f4. When a packet is received in
VLAN 4 with this MAC address as its source or destination, the packet is dropped.
OL-10102-01
mac address-table static mac-addr vlan vlan-id drop
no mac address-table static mac-addr vlan vlan-id
Unicast source or destination MAC address. Packets with this MAC address are
dropped.
Specify the VLAN for which the packet with the specified MAC address is
received. The range is 1 to 4094.
Modification
This command was introduced.
Multicast MAC addresses, broadcast MAC addresses, and router MAC addresses are not supported.
Packets that are forwarded to the CPU are also not supported.
If you add a unicast MAC address as a static address and configure unicast MAC address filtering,
the switch either adds the MAC address as a static address or drops packets with that MAC address,
depending on which command was entered last. The second command that you entered overrides the
first command.
For example, if you enter the mac address-table static mac-addr vlan vlan-id interface
interface-id global configuration command followed by the mac address-table static mac-addr
vlan vlan-id drop command, the switch drops packets with the specified MAC address as a source
or destination.
If you enter the mac address-table static mac-addr vlan vlan-id drop global configuration
command followed by the mac address-table static mac-addr vlan vlan-id interface interface-id
command, the switch adds the MAC address as a static address.
Catalyst 2950 and Catalyst 2955 Switch Command Reference
mac address-table static drop
2-195