Users Guide

mac-learn limit violation
Configures MAC address learning limit violation actions.
Syntax
mac-learn limit violation {drop | forward | log | shutdown}
Parameters
● drop — Drops the packet when an interface receives it from a new device after the learning limit is
reached.
● forward — Forwards the packet when an interface receives it from a new device after the learning
limit is reached.
● log — Displays a log message when an interface receives a packet from a new device after the
learning limit is reached and drops the packet.
● shutdown — Shuts down the interface when it receives a packet from a new device after the
learning limit is reached.
Default Disabled
Command Mode
CONFIGURATION-PORT-SECURITY
Usage
Information
The no version of this command disables MAC address learning limit violation actions.
Example
OS10(config-if-port-sec)# mac-learn limit violation drop
If you configure the system with the mac-learn limit violation log command, the system
displays a log message similar to the following:
Jan 10 09:12:24: Learn limit violation occurred on eth 1/1/1: vlan-100:
MAC-00:00:07:00:04:89
Supported
Releases
10.5.1.0 or later
mac-move allow
Enables MAC address movement.
Syntax
mac-move allow
Parameters
None
Default MAC address movement is disabled.
Command Mode
CONFIGURATION-PORT-SECURITY
Usage
Information
MAC address movement is not allowed for secure static and sticky MAC addresses. By default, MAC
address movement for dynamically-learned MAC address is disabled on the system.
The no version of this command disables MAC address movement.
Example
OS10(config-if-port-sec)# mac-move allow
Supported
Releases
10.5.1.0 or later
mac-move violation
Configures station move violation actions.
Syntax
mac-move violation {drop | log | shutdown-both | shutdown-offending |
shutdown-original}
Security 1195