Users Guide

The no version of this command disables MAC address movement.
Example
OS10(config-if-port-sec)# mac-move allow
Supported
Releases
10.5.1.0 or later
mac-move violation
Configures station move violation actions.
Syntax
mac-move violation {drop | log | shutdown-both | shutdown-offending |
shutdown-original}
Parameters
● drop — Drops the received packet when an interface detects the same MAC address that the
system has already learned on a different interface.
● log — Displays a log message when an interface detects the same MAC address that the system has
already learned on a different interface.
● shutdown-both — Shuts down both interfaces that learned the same MAC address.
● shutdown-offending — Shuts down the interface which detects the same MAC address that the
system has already learned on a different interface.
● shutdown-original — Shuts down the interface that originally learned the MAC address.
Default The system displays a log message when a MAC address move violation occurs.
Command Mode
CONFIGURATION-PORT-SECURITY
Usage
Information
The no version of this command disables MAC move violation actions.
Example
OS10(config-if-port-sec)# mac-move-violation log
If you configure the system with the mac-move-violation log command, the system displays a log
message similar to the following:
MAC Move Violation occurred: originalInterface: ethernet 1/13/1,
offendingInterface: Ethernet 1/13/2,vlanId: 100, MACAddr:
00:00:07:00:04:15.
Supported
Releases
10.5.1.0 or later
mac address-table static
Configures a static entry for the Layer 2 MAC address table.
Syntax
mac address-table static mac-address vlan vlan-id interface {ethernet node/
slot/port[:subport] | port-channel number}
Parameters
● mac-address — Enter the MAC address to add to the table in nn:nn:nn:nn:nn:nn format.
● vlan vlan-id — Enter the VLAN to apply the static MAC address to, from 1 to 4093.
● interface — Enter the interface type:
○ ethernet node/slot/port[:subport] — Enter the Ethernet information.
○ port-channel channel-number — Enter a port-channel interface number, from 1 to 128.
Default Not configured
Command Mode CONFIGURATION
Usage
Information
If you configure the switchport port-security command on an interface, you can configure MAC
address learning limit, sticky MAC address, and control MAC move.
1420 Security