RE: mac filter on cisco ME3400

As a temporary fix you could put static CAM entries for the MAC addresses that are flapping. Something like:

SW1(config)#mac address-table static 1234.5678.9abc vlan 1 interface Gig0/1

If you want to filter out the MAC completely you can null route it like:
 
SW1(config)#mac address-table static 1234.5678.9abc vlan 1 drop

If your version doesn't have the "drop" keyword then just point it at an interface that isn't actually in use.

HTH,

Brian McGahan, CCIE #8593 (R&S/SP/Security)
bmcgahan_at_INE.com
 
Internetwork Expert, Inc.
http://www.INE.com

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of Asim Riaz
Sent: Tuesday, June 28, 2011 5:22 AM
To: Vladimir Osipenko
Cc: ccielab_at_groupstudy.com
Subject: Re: mac filter on cisco ME3400

So the only option i have is Layer2 ACL? I already have mac acl configured but not sure how to check if the acl is matching some packet.

Thanks
Asim
On Tue, Jun 28, 2011 at 10:26 AM, Vladimir Osipenko <tiffolk_at_gmail.com>wrote:

> May be L2 ACL?
>
> mac access-group filtermac in
>
> On 27 June 2011 17:26, Asim Riaz <ariaz78_at_gmail.com> wrote:
> > priority which cannot be change. I am wondering what are the option
> > to
> block

Blogs and organic groups at http://www.ccie.net
Received on Tue Jun 28 2011 - 08:55:14 ART