Hub/Switch Reference Guide

98 VLAN Commands
NN47250-100 (Version 02.51)
Examples The following command shows Layer 2 forwarding restriction information for all
VLANs:
WSS# show security l2-restrict
VLAN Name En Drops Permit MAC Hits
---- ---------------- -- ---------- ------------------- ---------------------
1 default Y 0 00:0b:0e:02:53:3e 5947
00:30:b6:3e:5c:a8 9
2 vlan-2 Y 0 04:04:04:04:04:04 0
Table 14 describes the fields in the display.
See Also
• clear security l2-restrict on page 75
• clear security l2-restrict counters on page 75
• set security l2-restrict on page 78
show tunnel
Displays the tunnels from the WSS where you type the command.
Syntax show tunnel
Defaults None.
Access Enabled
Table 4: Output for show security l2-restrict
Field Description
VLAN VLAN number.
Name VLAN name.
En Enabled state of the feature for the VLAN:
• Y—Enabled. Forwarding of Layer 2 traffic from clients is
restricted to the MAC address(es) listed under Permit
MAC.
• N—Disabled. Layer 2 forwarding is not restricted.
Drops Number of packets dropped because the destination MAC address was not
one of the addresses listed under Permit MAC.
Permit MAC MAC addresses to which clients in the VLAN are allowed to send traffic at
Layer 2.
Hits Number of packets whose source MAC address was a client in this VLAN,
and whose destination MAC address was one of those listed under Permit
MAC.