Mac Lockdown - HP 3500yl Series Access Security Manual

Configuring and Monitoring Port Security

MAC Lockdown

HP Switch(config)# show mac-address vlan 2
Status and Counters - Address Table - VLAN 2
MAC Address
-------------
00000c-07ac00
000102-03db12
0001e6-b197a8
HP Switch(config)# clear mac-address vlan 2 mac 0001e6-b197a8
HP Switch(config)# show mac-address vlan 2
Status and Counters - Address Table - VLAN 2
MAC Address
-------------
00000c-07ac00
000102-03db12
Figure 14-14.Example showing a MAC Address cleared from the MAC Address Table.
N o t e
14-24
Located on Port
---------------
2
2
2
Located on Port
---------------
2
2
MAC Lockdown
MAC Lockdown, also known as "static addressing," is the permanent assign-
ment of a given MAC address (and VLAN, or Virtual Local Area Network) to
a specific port on the switch. MAC Lockdown is used to prevent station
movement and MAC address hijacking. It also controls address learning on
the switch.
Locking down a MAC address on a port and a specific VLAN only restricts the
MAC address on that VLAN. The client device with that MAC address is
allowed to access other VLANs on the same port or through other ports.
Port security and MAC Lockdown are mutually exclusive on a given port. You
can either use port security or MAC Lockdown, but never both at the same
time on the same port.
Syntax: [no] static-mac < mac-addr > vlan < vid > interface < port-number >