Mac Secure - Cisco ASR 9000 Series Reference Manual

Multipoint Layer 2 Services Commands

mac secure

To configure MAC security at a port and to set the default action that is to be taken when security is violated,
use the mac secure command in the l2vpn bridge group bridge domain configuration mode. To disable MAC
security, use the no form of this command.
mac secure {action [none| shutdown| restrict]| logging| disable}
no mac secure {action [none| shutdown]| logging| disable}
Syntax Description
action
none
shutdown
restrict
logging
disable
Command Default
If a MAC address has been learned on a secure port and, a relearn attempt from another port (secure or not)
is made, the default action is restrict.
Command Modes
l2vpn bridge group bridge domain configuration
Command History
Release
Release 4.0.1
Usage Guidelines
This command has no keywords or arguments.
Task ID
Task ID
l2vpn
(Optional) Indicates the action to be taken when security is violated.
Forwards the violating packet and allows the MAC address to be relearned.
Shuts down the violating bridge port.
Drops the violating packet and disables the learn attempt.
Note
(Optional) Enables logging.
(Optional) Disables mac security.
Cisco ASR 9000 Series Aggregation Services Router VPN and Ethernet Services Command Reference, Release
The restrict keyword in applicable to interfaces
only.
Modification
This command was introduced.
Operations
read, write

mac secure

6.1.x
279