
#Cisco mac address command to block mac

Table 5-7 Description of the display mac-address flapping command output display mac-address dynamic vsi 10 peer 10.1.1.2 verbose # Display the dynamic MAC address entry mapped to peer IP address 10.1.1.2 in VSI 10. display mac-address dynamic slot 1 vlan 9 verbose # Display detailed information about all dynamic MAC address entries in VLAN 9 on the board in slot 1. display mac-address dynamic slot 1 vlan 9 # Display all dynamic MAC address entries in VLAN 9 on the board in slot 1. MAC Address VLAN/VSI /BD Learned-From TypeĠ000-0000-0001 -/HUAWEI /- GE 1/0/2 dynamic # Display all dynamic MAC address entries. Table does not contain any blackhole MAC address, no information is displayed. If you run the display mac-address blackhole command without parameters, all blackhole MAC address entries are displayed. Output is incorrect, run the undo mac-address command to delete the entry or run the mac-address blackhole command to add a correct one. If any blackhole MAC address entry in the command These entries ensure communication between authorized users. To check whether blackhole MAC address entries are configured correctly, run this command. Dynamic MAC address entries that are learned by the switch and will be aged out when the aging time expires.Static MAC entries that are manually configured and will not be aged out.Blackhole MAC address entries are manually configured and will not be aged out. Blackhole MAC address entries that are used to discard packets with the specified MAC addresses or destination MAC addresses.The MAC address table contains the following MAC address entries: pre-authen: indicates a MAC address entry corresponding to a user that is in pre-connection state and does not obtain an IP address after NAC authentication is enabled.authen: indicates a MAC address entry corresponding to the NAC authentication user that obtains an IP address (excluding the Layer 3 authentication user of which the MAC address cannot be generated and wireless user in direct forwarding.snooping: indicates a static MAC address entry generated based on the dynamic DHCP snooping binding table.mux: indicates a MAC address entry learned by a MUX VLAN enabled interface.sticky: indicates a MAC address entry that an interface learns after the sticky MAC function is enabled.sec-config: indicates a static secure MAC address entry configured by using the port-security mac-address command.security: indicates a MAC address entry that an interface learns after port security is enabled.OAM-PO: indicates a MAC address entry configured by using the mac-populate command.OAM-PU: indicates a MAC address entry configured by using the mac-purge command.dynamic: indicates a MAC address entry learned by the switch, which will be aged out when the aging time expires.blackhole: indicates a blackhole MAC address entry, which is manually configured and will not be aged out, configured by using the mac-address blackhole command.static: indicates a static MAC address entry, which is manually configured and will not be aged out, configured by using the mac-address static vlan, mac-address static vlanif, mac-address static bridge-domain, mac-address static bridge-domain vni, or mac-address static vsi command.This is thus the procedure of checking the MAC addresses on a switch.
#Cisco mac address command to block download
The commands and command outputs are not provided here.įor more information about MAC address-related commands, download the product documentation and see Reference - Command Reference - Ethernet Switching Configuration Commands - MAC Address Table Configuration Commands. You can change the dynamic parameter in the command to blackhole, static, security, sticky, and summary to check blackhole MAC address entries, static MAC address entries, secure dynamic MAC address entries, sticky MAC address entries, and statistics on MAC address entries, respectively.
display mac-address GigabitEthernet 0/0/XĬ) Check all the dynamic MAC address entries in the system. Check the MAC address entries learned by a switch.Ī) Check all MAC address entries on the switch.ī) Check the MAC address entries on an interface. Output peak rate 13880 bits/sec, Record time: 02:50ģ. Input peak rate 13880 bits/sec, Record time: 02:50 Last 300 seconds output rate 480 bits/sec, 0 packets/sec Last 300 seconds input rate 480 bits/sec, 0 packets/sec IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is xxxx-xxxx-xxxx PVID : 1, TPID : 8100(Hex), The Maximum Frame Length is 1600

Switch Port, Link-type : trunk(configured), System bridge MAC address: xxxx-xxxx-xxxxĢ. This post is regarding the procedure of checking the MAC addresses on a switch.
