Disabling Mac Address Learning On A Vlan - Cisco 3032 Software Configuration Manual

Managing the MAC Address Table
•
You enable unicast MAC address filtering and configure the switch to drop packets with a specific
address by specifying the source or destination unicast MAC address and the VLAN from which it is
received.
Beginning in privileged EXEC mode, follow these steps to configure the switch to drop a source or
destination unicast static address:
Command
Step 1
configure terminal
Step 2 mac address-table static mac-addr
vlan vlan-id drop
Step 3 end
Step 4 show mac address-table static
Step 5 copy running-config startup-config
To disable unicast MAC address filtering, use the no mac address-table static mac-addr vlan vlan-id
global configuration command.
This example shows how to enable unicast MAC address filtering and to configure the switch to drop
packets that have a source or destination address of c2f3.220a.12f4. When a packet is received in
VLAN 4 with this MAC address as its source or destination, the packet is dropped:
Switch(config)# mac

Disabling MAC Address Learning on a VLAN

By default, MAC address learning is enabled on all VLANs on the switch. You can control MAC address
learning on a VLAN to manage the available MAC address table space by controlling which VLANs,
and therefore which ports, can learn MAC addresses. Before you disable MAC address learning, be sure
that you are familiar with the network topology and the switch system configuration. Disabling MAC
address learning on a VLAN could cause flooding in the network.
Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide
6-28
If you add a unicast MAC address as a static address and configure unicast MAC address filtering,
the switch either adds the MAC address as a static address or drops packets with that MAC address,
depending on which command was entered last. The second command that you entered overrides the
first command.
For example, if you enter the mac address-table static mac-addr vlan vlan-id interface
interface-id global configuration command followed by the mac address-table static mac-addr
vlan vlan-id drop command, the switch drops packets with the specified MAC address as a source
or destination.
If you enter the mac address-table static mac-addr vlan vlan-id drop global configuration
command followed by the mac address-table static mac-addr vlan vlan-id interface interface-id
command, the switch adds the MAC address as a static address.
Purpose
Enter global configuration mode.
Enable unicast MAC address filtering and configure the switch to drop a
packet with the specified source or destination unicast static address.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
a
ddress-table static c2f3.220a.12f4 vlan 4 drop
For mac-addr, specify a source or destination unicast MAC address.
•
Packets with this MAC address are dropped.
For vlan-id, specify the VLAN for which the packet with the
•
specified MAC address is received. Valid VLAN IDs are 1 to 4094.
Chapter 6 Administering the Switch
OL-12247-04