Table of Contents
Advertisement
Configuring and Monitoring Port Security
MAC Lockout
14-32
MAC Lockout overrides MAC Lockdown, port security, and 802.1X authenti-
cation.
You cannot use MAC Lockout to lock:
•
Broadcast or Multicast Addresses (Switches do not learn these)
•
Switch Agents (The switch's own MAC Address)
A MAC address can exist on many different VLANs, so a lockout MAC address
must be added to the MAC table as a drop. As this can quickly fill the MAC
table, restrictions are placed on the number of lockout MAC addresses based
on the number of VLANs configured.
VLANs Configured
1-8
9-16
17-256
257-1024
1025-2048
There are limits for the number of VLANs, Multicast Filters, and Lockout
MACs that can be configured concurrently as all use MAC table entries. The
limits are shown below.
Table 14-13. Limits on Lockout MACs
# VLANs
< = 1024
1025-2048
Number of MAC Lockout
Addresses
200
100
64
16
8
# Multicast Filters
16
8
Total Number of MAC
Addresses
1,600
1,600
16,384
16,384
16,384
# Lockout MACs
16
8
Hide quick links:
Advertisement
Table of Contents
