Cisco Catalyst 4500 series Administration Manual page 206

Managing the MAC Address Table
•
You enable unicast MAC address filtering and configure the switch to drop packets with a specific
address by specifying the source or destination unicast MAC address and the VLAN from which it is
received.
To configure the switch to drop a source or destination unicast static address, perform this task:
Command
Step 1
configure terminal
Step 2
mac address-table static mac-addr
vlan vlan-id drop
Step 3
end
Step 4
show mac address-table static
Step 5
copy running-config startup-config
This example shows how to enable unicast MAC address filtering and to configure the switch to drop
packets that have a source or destination address of c2f3.220a.12f4. When a packet is received in
VLAN 4 with this MAC address as its source or destination, the packet is dropped:
Switch# configure terminal
Switch(config)# mac
Switch(config)# end
Switch#
Note To filter MAC addresses on a secondary VLAN, specify the corresponding primary VLAN in the above
configuration. If the specified VLAN is a primary VLAN, all matching packets received in this primary
VLAN and associated secondary VLANs are dropped.
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
4-38
If you add a unicast MAC address as a static address and configure unicast MAC address filtering,
the switch either adds the MAC address as a static address or drops packets with that MAC address,
depending on which command was entered last. The second command that you entered overrides the
first command.
For example, if you enter the mac address-table static vlan interface global configuration
command followed by the mac address-table static vlan drop command, the switch drops packets
with the specified MAC address as a source or destination.
If you enter the mac address-table static vlan drop global configuration command followed by the
mac address-table static vlan interface command, the switch adds the MAC address as a static
address.
Purpose
Enters global configuration mode.
Enables unicast MAC address filtering and configure the switch to drop a
packet with the specified source or destination unicast static address.
To disable unicast MAC address filtering, use the no mac address-table
static vlan global configuration command.
Returns to privileged EXEC mode.
Verifies your entries.
(Optional) Saves your entries in the configuration file.
a
ddress-table static c2f3.220a.12f4 vlan 4 drop
For mac-addr, specify a source or destination unicast MAC address.
•
Packets with this MAC address are dropped.
For vlan-id, specify the VLAN for which the packet with the
•
specified MAC address is received. Valid VLAN IDs are 1 to 4094.
Chapter 4 Administering the Switch
OL-30933-01