Users Guide

Example
OS10(config-if-port-sec)# mac-move allow
Supported
Releases
10.5.1.0 or later
mac-move violation
Configures station move violation actions.
Syntax
mac-move violation {drop | log | shutdown-both | shutdown-offending |
shutdown-original}
Parameters
● drop — Drops the received packet when an interface detects the same MAC address that the
system has already learned on a different interface.
● log — Displays a log message when an interface detects the same MAC address that the system has
already learned on a different interface.
● shutdown-both — Shuts down both interfaces that learned the same MAC address.
● shutdown-offending — Shuts down the interface which detects the same MAC address that the
system has already learned on a different interface.
● shutdown-original — Shuts down the interface that originally learned the MAC address.
Default The system displays a log message when a MAC address move violation occurs.
Command Mode
CONFIGURATION-PORT-SECURITY
Usage
Information
The no version of this command disables MAC move violation actions.
Example
OS10(config-if-port-sec)# mac-move-violation log
If you configure the system with the mac-move-violation log command, the system displays a log
message similar to the following:
MAC Move Violation occurred: originalInterface: ethernet 1/13/1,
offendingInterface: Ethernet 1/13/2,vlanId: 100, MACAddr:
00:00:07:00:04:15.
Supported
Releases
10.5.1.0 or later
mac address-table static
Configures a static entry for the Layer 2 MAC address table.
Syntax
mac address-table static mac-address vlan vlan-id interface {ethernet node/
slot/port[:subport] | port-channel number}
Parameters
● mac-address — Enter the MAC address to add to the table in nn:nn:nn:nn:nn:nn format.
● vlan vlan-id — Enter the VLAN to apply the static MAC address to, from 1 to 4093.
● interface — Enter the interface type:
○ ethernet node/slot/port[:subport] — Enter the Ethernet information.
○ port-channel channel-number — Enter a port-channel interface number, from 1 to 128.
Default Not configured
Command Mode CONFIGURATION
Usage
Information
If you configure the switchport port-security command on an interface, you can configure MAC
address learning limit, sticky MAC address, and control MAC move.
The no version of this command resets the value to the default.
1200 Security