Monitoring The Transparent Firewall - Cisco ASA Series Cli Configuration Manual

Chapter 1 Configuring the Transparent or Routed Firewall
Disabling MAC Address Learning
By default, each interface automatically learns the MAC addresses of entering traffic, and the ASA adds
corresponding entries to the MAC address table. You can disable MAC address learning if desired,
however, unless you statically add MAC addresses to the table, no traffic can pass through the ASA.
To disable MAC address learning, enter the following command:
Command
mac-learn interface_name disable
Example:
hostname(config)# mac-learn inside disable

Monitoring the Transparent Firewall

•
•
Monitoring ARP Inspection
To monitor ARP inspection, perform the following task:
Command
show arp-inspection
Monitoring the MAC Address Table
You can view the entire MAC address table (including static and dynamic entries for both interfaces), or
you can view the MAC address table for an interface. To view the MAC address table, enter the following
command:
Command
show mac-address-table [interface_name]
Examples
The following is sample output from the show mac-address-table command that shows the entire table:
hostname# show mac-address-table
interface
-----------------------------------------------------------------------
outside
inside
inside
Purpose
Disables MAC address learning.
The no form of this command reenables MAC address learning. The clear
configure mac-learn command reenables MAC address learning on all
interfaces.
Monitoring ARP Inspection, page 1-13
Monitoring the MAC Address Table, page 1-13
Purpose
Shows the current settings for ARP inspection on all interfaces.
Purpose
Shows the MAC address table.
mac address
0009.7cbe.2100
0010.7cbe.6101
0009.7cbe.5101
type Time Left
static -
static -
dynamic 10
Cisco ASA Series CLI Configuration Guide
Monitoring the Transparent Firewall
1-13