Specifications

show security l2-restrict

Chapter 6

VLAN Commands

show security l2-restrict

Displays configuration information and statistics for Layer 2 forwarding

restriction.

Syntax

show security l2-restrict [vlan vlan-id | all]

Defaults

If you do not specify a VLAN name or all, information is displayed for

all VLANs.

Access

Enabled.

Examples

The following command shows Layer 2 forwarding restriction

information for all VLANs:

PROMPT# show security l2-restrict

VLAN Name En Drops Permit MAC Hits

---- ----------------- -- ---------- ------------------ ------

1 default Y 0 00:60:b9:11:53:3e 5947

00:60:b9:11:5c:a8 9

2 vlan-2 Y 0 04:04:04:04:04:04 0

Table 10 describes the fields in the display.

vlan-id VLAN name or number.

all Displays information for all VLANs.

Table 10. Output for show security l2-restrict

Field Description

VLAN VLAN number.

Name VLAN name.

En Enabled state of the feature for the VLAN:

• Y—Enabled. Forwarding of Layer 2 traffic from clients is

restricted to the MAC address(es) listed under Permit

MAC.

• N—Disabled. Layer 2 forwarding is not restricted.

Drops Number of packets dropped because the destination MAC

address is not one of the addresses listed under Permit MAC.