Re: mac filter on cisco ME3400

well, port-security also does some kind of mac control =)

Also ME switches, as far as I am concerned, can turn off mac learning.
Turn it off and use static entries.

On 28 June 2011 17:55, Brian McGahan <bmcgahan_at_ine.com> wrote:
> As a temporary fix you could put static CAM entries for the MAC addresses that are flapping. Something like:
>
> SW1(config)#mac address-table static 1234.5678.9abc vlan 1 interface Gig0/1
>
> If you want to filter out the MAC completely you can null route it like:
>
> SW1(config)#mac address-table static 1234.5678.9abc vlan 1 drop
>
> If your version doesn't have the "drop" keyword then just point it at an interface that isn't actually in use.
>
>
> HTH,
>
> Brian McGahan, CCIE #8593 (R&S/SP/Security)
> bmcgahan_at_INE.com
>
> Internetwork Expert, Inc.
> http://www.INE.com
>
>
> -----Original Message-----
> From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of Asim Riaz
> Sent: Tuesday, June 28, 2011 5:22 AM
> To: Vladimir Osipenko
> Cc: ccielab_at_groupstudy.com
> Subject: Re: mac filter on cisco ME3400
>
> So the only option i have is Layer2 ACL? I already have mac acl configured but not sure how to check if the acl is matching some packet.
>
> Thanks
> Asim
> On Tue, Jun 28, 2011 at 10:26 AM, Vladimir Osipenko <tiffolk_at_gmail.com>wrote:
>
>> May be L2 ACL?
>>
>> mac access-group filtermac in
>>
>> On 27 June 2011 17:26, Asim Riaz <ariaz78_at_gmail.com> wrote:
>> > priority which cannot be change. I am wondering what are the option
>> > to
>> block
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Wed Jun 29 2011 - 01:37:40 ART