Users Guide

Supported
Releases
10.5.1.0 or later
mac-learn
Configures the number of MAC addresses an interface can learn.
Syntax
mac-learn {limit learn-limit-value | no-limit}
Parameters
● limit learn-limit-value — Enter a value from 1 to 3072.
● no-limit — The interface learns the maximum number of MAC addresses that the system
supports.
Default One MAC address
Command Mode
CONFIGURATION-PORT-SECURITY
Usage
Information
After you enable port security on an interface, by default, the interface learns a maximum of one MAC
address. Use the mac-learn limit command to configure the number of MAC addresses an interface
can learn.
If the system contains more static MAC addresses than the MAC address learn limit, the system displays
an error message. You can delete a few static MAC addresses or increase the number of MAC addresses
the port can learn.
If the total number of dynamic MAC addresses on an interface is greater than the newly configured MAC
learn limit, the dynamic MAC addresses are flushed.
Example
OS10(config-if-port-sec)# mac-learn limit 100
Supported
Releases
10.5.1.0 or later
mac-learn limit violation
Configures MAC address learning limit violation actions.
Syntax
mac-learn limit violation {drop | forward | log | shutdown}
Parameters
● drop — Drops the packet when an interface receives it from a new device after the learning limit is
reached.
● forward — Forwards the packet when an interface receives it from a new device after the learning
limit is reached.
● log — Displays a log message when an interface receives a packet from a new device after the
learning limit is reached and drops the packet.
● shutdown — Shuts down the interface when it receives a packet from a new device after the
learning limit is reached.
Default Disabled
Command Mode
CONFIGURATION-PORT-SECURITY
Usage
Information
The no version of this command disables MAC address learning limit violation actions.
Example
OS10(config-if-port-sec)# mac-learn limit violation drop
If you configure the system with the mac-learn limit violation log command, the system
displays a log message similar to the following:
Jan 10 09:12:24: Learn limit violation occurred on eth 1/1/1: vlan-100:
MAC-00:00:07:00:04:89
Security 1399