Example Configuring A Sticky Mac Address - Cisco NCS 4200 Series Configuration Manual

Configuring MAC Address Security on Service Instances and EVC Port Channels

Example Configuring a Sticky MAC Address

Device> enable
Device# configure terminal
Device(config)# interface gigabitethernet 3/0/1
Device(config-if)# service instance 100 ethernet
Device(config-if-srv)# encapsulation dot1Q 100
Device(config-if-srv)# bridge-domain 100
Device(config-if-srv)# mac security sticky address 1111.2222.3333
Device(config-if-srv)# mac security
Example Displaying the MAC Addresses on a Specific Secure Service Instance
Device# show ethernet service instance id 10 inter gig 0/0/3 mac security
address Bridge-domain 10
MAC Address
0000.00ac.ef02
0000.00ac.ef03
0001.0001.aaaa
0001.0001.aaab
Example Displaying the Last Violation on a Specific Service Instance
Device# show bridge-domain 100 mac security last violation Te0/0/3 ServInst 200
Last violation at: 15:54:25 IST Fri Jun 5 2015
Source MAC address: 0000.1111.1111
Reason: Re-learn attempt
Total violation count: 321
Example Displaying the MAC Security Status of a Specific Service Instance
Device# show ethernet service instance id 100 interface te0/0/3 mac security
Bridge-domain 100
MAC Security enabled: yes
Example Displaying the MAC Addresses of All Secured Service Instances
Device# show ethernet service instance mac security address
Port
Gi0/0/3 ServInst 10
Gi0/0/3 ServInst 10
Gi0/0/3 ServInst 10
Gi0/0/3 ServInst 10
Gi0/0/3 ServInst 10
Gi0/0/3 ServInst 10
Gi0/0/3 ServInst 10
Gi0/0/3 ServInst 10
Gi0/0/3 ServInst 10
Gi0/0/3 ServInst 10
Type
sticky
sticky
dynamic
dynamic
Bridge-domain MAC Address
10 0000.00ac.ef02 sticky
10 0000.00ac.ef03 sticky
10 0000.00ac.ef04
10 0000.00ac.ef05
10 0000.00ac.ef06
10 0000.00ac.ef07
10 0000.00ac.ef08
10 0000.00ac.ef09
10 0000.00ac.ef0a
10 0000.00ac.ef0b
Example Configuring a Sticky MAC Address
Type
dynamic
dynamic
sticky
dynamic
dynamic
dynamic
dynamic
dynamic
Layer 2 Configuration Guide for Cisco NCS 4200 Series
69