Cisco Systems DOC-7814982 Adding and Removing Secure Addresses

7-59
Catalyst 2950 Desktop Switch Software Configuration Guide
78-14982-01
Chapter 7 Adminis tering the Switch Managing the MAC Address Table
Beginning i n privileged EX EC mo de , follow these steps to add a static address:
To re move sta tic en tr ies fr om th e a ddr es s ta ble, u se t he no mac address-table static mac-addr vlan
vlan-i d interface interface-id global co nfiguration c omma nd.
This example shows how to add the static a ddress c2 f3.220a .12f4 to th e MAC address tabl e. When a
packet is recei ved in VLA N 4 with this MA C address as its d estination addres s, the packets is forwar ded
to the specified interface:
Switch(config)# mac address-table static c2f3.220a.12f4 vlan 4 interface
gigabitethernet0/1
Adding and Removing Secure Addresses
A secure address is a manually entered unicast address or dynamically learned address that is forwarded
to only one p ort per VLA N. If you ente r a static address tha t is already assi gne d to another po rt, the
request will be rejected.
Secure addr esse s ca n be l ear ned d yna mic ally i f t he c onfigured se cure add re sses do n ot r eac h the
maximum limit of the port.
You can configure an interface to convert the dynamic MAC addresses to sticky secure MAC addresses
and to add th em to the run ning co nfiguration by enabling sticky learning. When sticky learning is
enabled, th e interf ace con v erts al l the dynamic secu re MA C addre sses, including those that we re learned
dynamically before sticky learning is enabled, to sticky secure MAC addresses. It adds all the sticky
secure MAC addresses to t he r unn ing co nfigurati on. For mor e info rmat ion, see the “Secure MAC
Addresses” section on page 18-5.
Command Purpose
Step 1 configure terminal Enter globa l configurati on mode.
Step 2 mac address-table static mac-addr
vlan vlan-id interface interface-id Add a static addr ess to the MAC address table.
•For mac-addr, specify the destination MAC address (unicast or
multicast) to add to the address table. Packets with this destination
address received in the specified VLAN are forwarded to the
specified interface.
•For vlan-id, specify the VLAN for which the packet with the
specified MAC address is received. Valid VLAN IDs are 1 to 4094
when the EI is insta lled and 1 to 1005 wh en the SI is i nstalle d; do not
enter leading zeros.
•For interface-id..., specify the interface to which the received packet
is forwarded. Valid interfaces include physical ports.
Step 3 end Return to privileged EXEC mode.
Step 4 show mac address-table static Verify yo ur ent rie s.
Step 5 copy running-config startup-config (Optiona l) Save your entries in the co nfigurati on file.