Users Guide

If the system contains more static MAC addresses than the MAC address learn limit, the system displays
an error message. You can delete a few static MAC addresses or increase the number of MAC addresses
the port can learn.
If the total number of dynamic MAC addresses on an interface is greater than the newly configured MAC
learn limit, the dynamic MAC addresses are flushed.
Example
OS10(config-if-port-sec)# mac-learn limit 100
Supported
Releases
10.5.1.0 or later
mac-learn limit violation
Configures MAC address learning limit violation actions.
Syntax
mac-learn limit violation {drop | forward | log | shutdown}
Parameters
● drop — Drops the packet when an interface receives it from a new device after the learning limit is
reached.
● forward — Forwards the packet when an interface receives it from a new device after the learning
limit is reached.
● log — Displays a log message when an interface receives a packet from a new device after the
learning limit is reached and drops the packet.
● shutdown — Shuts down the interface when it receives a packet from a new device after the
learning limit is reached.
Default Disabled
Command Mode
CONFIGURATION-PORT-SECURITY
Usage
Information
The no version of this command disables MAC address learning limit violation actions.
Example
OS10(config-if-port-sec)# mac-learn limit violation drop
If you configure the system with the mac-learn limit violation log command, the system
displays a log message similar to the following:
Jan 10 09:12:24: Learn limit violation occurred on eth 1/1/1: vlan-100:
MAC-00:00:07:00:04:89
Supported
Releases
10.5.1.0 or later
mac-move allow
Enables MAC address movement.
Syntax
mac-move allow
Parameters
None
Default MAC address movement is disabled.
Command Mode
CONFIGURATION-PORT-SECURITY
Usage
Information
MAC address movement is not allowed for secure static and sticky MAC addresses. By default, MAC
address movement for dynamically-learned MAC address is disabled on the system.
The no version of this command disables MAC address movement.
Security 1199