Cisco IE-3000-8TC Software Configuration Manual page 176

Managing the MAC Address Table
Follow these guidelines when disabling MAC address learning on a VLAN:
•
•
•
•
•
•
•
Beginning in privileged EXEC mode, follow these steps to disable MAC address learning on a VLAN:
Command
Step 1
configure terminal
Step 2
no mac address-table learning vlan
vlan-id
Step 3
end
Step 4 show mac address-table learning [vlan
vlan-id]
Step 5 copy running-config startup-config
To reenable MAC address learning on a VLAN, use the default mac address-table learning vlan
vlan-id global configuration command. You can also reenable MAC address learning on a VLAN by
entering the mac address-table learning vlan vlan-id global configuration command. The first
(default) command returns to a default condition and therefore does not appear in the output from the
show running-config command. The second command causes the configuration to appear in the show
running-config privileged EXEC command display.
This example shows how to disable MAC address learning on VLAN 200:
Switch(config)# no mac
You can display the MAC address learning status of all VLANs or a specified VLAN by entering the
show mac-address-table learning [vlan vlan-id] privileged EXEC command.
Cisco IE 3000 Switch Software Configuration Guide
8-26
Use caution before disabling MAC address learning on a VLAN with a configured switch virtual
interface (SVI). The switch then floods all IP packets in the Layer 2 domain.
You can disable MAC address learning on a single VLAN ID (for example, no mac address-table
learning vlan 223) or on a range of VLAN IDs (for example, no mac address-table learning vlan
1-20, 15).
We recommend that you disable MAC address learning only in VLANs with two ports. If you
disable MAC address learning on a VLAN with more than two ports, every packet entering the
switch is flooded in that VLAN domain.
You cannot disable MAC address learning on a VLAN that is used internally by the switch. If the
VLAN ID that you enter is an internal VLAN, the switch generates an error message and rejects the
command. To view internal VLANs in use, enter the show vlan internal usage privileged EXEC
command.
If you disable MAC address learning on a VLAN configured as a private-VLAN primary VLAN,
MAC addresses are still learned on the secondary VLAN that belongs to the private VLAN and are
then replicated on the primary VLAN. If you disable MAC address learning on the secondary
VLAN, but not the primary VLAN of a private VLAN, MAC address learning occurs on the primary
VLAN and is replicated on the secondary VLAN.
You cannot disable MAC address learning on an RSPAN VLAN. The configuration is not allowed.
If you disable MAC address learning on a VLAN that includes a secure port, MAC address learning
is not disabled on that port. If you disable port security, the configured MAC address learning state
is enabled.
Purpose
Enter global configuration mode.
Disable MAC address learning on the specified VLAN or VLANs. You
can specify a single VLAN ID or a range of VLAN IDs separated by a
hyphen or comma. Valid VLAN IDs are 1 to 4094.
Return to privileged EXEC mode.
Verify the configuration.
(Optional) Save your entries in the configuration file.
a
ddress-table learning vlan 200
Chapter 8 Administering the Switch
OL-13018-03