Specifications

clear security l2-restrict counters

Chapter 6

VLAN Commands

Defaults

If you do not specify a list of MAC addresses or all, all addresses are

removed.

Access

Enabled.

Usage

If you clear all MAC addresses, Layer 2 forwarding is no longer restricted

in the VLAN. Clients within the VLAN can communicate directly.

There can be a slight delay before functions such as pinging between clients

become available again after Layer 2 restrictions are lifted. Even though packets

are passed immediately once Layer 2 restrictions are gone, it can take 10 seconds

or more for upper-layer protocols to update their ARP caches and regain their

functionality.

To clear the statistics counters without removing any MAC addresses, use the

clear security l2-restrict counters command instead.

Examples

The following command removes MAC address aa:bb:cc:dd:ee:ff from

the list of addresses that clients in VLAN abc_air are allowed to send traffic at

Layer 2:

PROMPT# clear security l2-restrict vlan abc_air permit-mac aa:bb:cc:dd:ee:ff

success: change accepted.