Configuring MAC Security

This document describes the MAC security feature and configuration steps to implement MAC security.

Prerequisites for Configuring MAC Security

  • NID must have an IP address.

Information About MAC Security

You can use the MAC security feature to restrict input to an interface by limiting and identifying MAC addresses of the devices that are allowed to access the port. When you assign secure MAC addresses to a secure port, the port does not forward packets with source addresses outside the group of defined addresses. If you limit the number of secure MAC addresses to one and assign a single secure MAC address, the device attached to that port is assured the full bandwidth of the port.

How to Provision MAC Security

Configuring Port Security

     Command or ActionPurpose
    Step 1ProvisionMacTableSecurityType


    Example: 
    Switch# ProvisionMacTableSecurityType
          		Enters the ProvisionMacTableSecurityType mode.  
    Step 2portSecurityGlobalConfig portSecurityGlobalConfigReq {mode {disable | enable} | agingTime {time time | disable}}


    Example: 
    Switch(ProvisionMacTableSecurityType)# portSecurityGlobalConfig portSecurityGlobalConfigReq agingTime time 60
Switch(ProvisionMacTableSecurityType)# portSecurityGlobalConfig portSecurityGlobalConfigReq mode enable
          		Port Security Global Configuration.
    • portSecurityGlobalConfigReq—Specifies port security global configuration.
    • mode—Option to enable/disable port security.
    • disable—Disables port security globally.
    • enable—Enables port security globally.
    • agingTime—Enables or disables port security aging.
    • time—Enables and sets time.
    • time—Time. The valid range is from 10 to 10000000 seconds.
    • disable—Disables aging.
     
    Step 3portSecurityGlobalConfig review


    Example: 
    Switch(ProvisionMacTableSecurityType)# portSecurityGlobalConfig review
          		Displays the configuration.  
    Step 4portSecurityGlobalConfig commit


    Example: 
    Switch(ProvisionMacTableSecurityType)# portSecurityGlobalConfig commit
          		Sends the configuration to NID.  
    Step 5portSecurityInterfaceConfig portSecurityInterfaceConfigReq {interface-id interface-id | port-security {mode {disable | enable} | mac-limit {maximum max-mac-number | disable} | violation {protect | shutdown | traponly | trap-shutdown | disable}}}


    Example: 
    Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig portSecurityInterfaceConfigReq interface-id 2
Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig portSecurityInterfaceConfigReq port-security mode enable

Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig portSecurityInterfaceConfigReq interface-id 2
Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig portSecurityInterfaceConfigReq port-security mac-limit maximum 100

Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig portSecurityInterfaceConfigReq interface-id 2
Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig portSecurityInterfaceConfigReq port-security violation shutdown
    own
          		Interface mode Port Security Configuration.
    • interface-id—Specifies the interface ID.
    • interface-id—Interface ID. The valid range is from 1 to 6.
    • port-security—Configures port security.
    • mode—Specifies the mode for port security.
    • disable—Disables port security.
    • enable—Enables port security.
    • mac-limit—Specifies MAC address learning limit.
    • maximum—Specifies the maximum number of MAC addresses.
    • max-mac-number—Maximum number of MAC addresses. The valid range is from 1 to 1024.
    • disable—Removes the MAC limit.
    • violation—Specifies the action when exceeding the limit.
    • protect—Specifies no action.
    • shutdown—Shuts down the port.
    • traponly—Sends an SNMP trap.
    • trap-shutdown—Sends an SNMP trap and shuts down the port.
    • disable—Disables violation type.
     
    Step 6portSecurityInterfaceConfig review


    Example: 
    Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig review
          		Displays the configuration.  
    Step 7portSecurityInterfaceConfig commit


    Example: 
    Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig commit
          		Sends the configuration to NID.  
    Step 8exit


    Example: 
    Switch(ProvisionMacTableSecurityType)# exit
          		Exits the ProvisionMacTableSecurityType mode.  

    Configuration Example

    The example shows how to configure port security: 

    Switch(ProvisionMacTableSecurityType)# portSecurityGlobalConfig portSecurityGlobalConfigReq agingTime time 60
Switch(ProvisionMacTableSecurityType)# portSecurityGlobalConfig portSecurityGlobalConfigReq mode enable
Switch(ProvisionMacTableSecurityType)# portSecurityGlobalConfig review
Switch(ProvisionMacTableSecurityType)# portSecurityGlobalConfig commit

Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig portSecurityInterfaceConfigReq interface-id 2
Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig portSecurityInterfaceConfigReq port-security mode enable
Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig portSecurityInterfaceConfigReq interface-id 2
Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig portSecurityInterfaceConfigReq port-security mac-limit maximum 100
Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig portSecurityInterfaceConfigReq interface-id 2
Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig portSecurityInterfaceConfigReq port-security violation shutdown

Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig review
Switch(ProvisionMacTableSecurityType)# portSecurityInterfaceConfig commit
Switch(ProvisionMacTableSecurityType)# exit

    Configuring MAC Security

       Command or ActionPurpose
      Step 1ProvisionMacTableSecurityType


      Example: 
      Switch# ProvisionMacTableSecurityType
              		Enters the ProvisionMacTableSecurityType mode.  
      Step 2setMacGlobalConfig setMacGlobalConfigReq {macAgingTime {setAgingTime aging-time | disable} | staticMacEntry | learning}


      Example: 
      Switch(ProvisionMacTableSecurityType)# setMacGlobalConfig setMacGlobalConfigReq macAgingTime setAgingTime 100
              		Global Configuration for MAC address table.
      • macAgingTime—Configures MAC aging time.
      • setAgingTime—Specifies aging time.
      • aging-time—Aging time in seconds. Valid range is from 10 to 1000000.
      • disable—Disables MAC aging.
      • staticMacEntry—Specifies static MAC address.
      • learning—Specifies MAC learning on VLAN.
       
      Step 3setMacGlobalConfig review


      Example: 
      Switch(ProvisionMacTableSecurityType)# setMacGlobalConfig review
              		Displays the configuration.  
      Step 4setMacGlobalConfig commit


      Example: 
      Switch(ProvisionMacTableSecurityType)# setMacGlobalConfig commit
              		Sends the configuration to NID.  
      Step 5setMacInterfaceConfig setMacInterfaceConfigReq {interface-id interface-id | mode {learning {enable | disable} | secure {enable | disable}}}


      Example: 
      Switch(ProvisionMacTableSecurityType)# setMacInterfaceConfig setMacInterfaceConfigReq interface-id 3 
Switch(ProvisionMacTableSecurityType)# setMacInterfaceConfig setMacInterfaceConfigReq mode learning enable
              		Interface mode for MAC configuration.
      • interface-id—Specifies the interface ID.
      • interface-id—Interface ID.
      • mode—Specifies the learning mode.
      • learning—Specifies port default learning mode.
      • enable—Enables MAC learning.
      • disable—Disables MAC learning.
      • secure—Specifies port secure learning mode.
      • enable—Enables secure MAC learning.
      • disable—Disables secure MAC learning.
       
      Step 6setMacInterfaceConfig review


      Example: 
      Switch(ProvisionMacTableSecurityType)# setMacInterfaceConfig review
              		Displays the configuration.  
      Step 7setMacInterfaceConfig commit


      Example: 
      Switch(ProvisionMacTableSecurityType)# setMacInterfaceConfig commit
              		Sends the configuration to NID.  
      Step 8exit


      Example: 
      Switch(ProvisionMacTableSecurityType)# exit
              		Exits the ProvisionMacTableSecurityType mode.  

      Configuration Example

      The example shows how to configure MAC table learning: 

      Switch(ProvisionMacTableSecurityType)# setMacGlobalConfig setMacGlobalConfigReq macAgingTime setAgingTime 100
Switch(ProvisionMacTableSecurityType)# setMacGlobalConfig review
Switch(ProvisionMacTableSecurityType)# setMacGlobalConfig commit

Switch(ProvisionMacTableSecurityType)# setMacInterfaceConfig setMacInterfaceConfigReq interface-id 3 
Switch(ProvisionMacTableSecurityType)# setMacInterfaceConfig setMacInterfaceConfigReq mode learning enable
Switch(ProvisionMacTableSecurityType)# setMacInterfaceConfig review
Switch(ProvisionMacTableSecurityType)# setMacInterfaceConfig commit

Switch(ProvisionMacTableSecurityType)# exit

      Clearing MAC Address Table

         Command or ActionPurpose
        Step 1ProvisionMacTableSecurityType


        Example: 
        Switch# ProvisionMacTableSecurityType
                  		Enters the ProvisionMacTableSecurityType mode.  
        Step 2clearMacTable clearMacTableReq clearAll


        Example: 
        Switch(ProvisionMacTableSecurityType)# clearMacTable clearMacTableReq clearAll
                  		Clears MAC address table.
        • clearAll—Clears all entries.
         
        Step 3clearMacTable review


        Example: 
        Switch(ProvisionMacTableSecurityType)# clearMacTable review
                  		Displays the configuration.  
        Step 4clearMacTable commit


        Example: 
        Switch(ProvisionMacTableSecurityType)# clearMacTable commit
                  		Sends the configuration to NID.  
        Step 5exit


        Example: 
        Switch(ProvisionMacTableSecurityType)# exit
                  		Exits the ProvisionMacTableSecurityType mode.  

        Configuration Example

        The example shows how to configure port security: 

        Switch(ProvisionMacTableSecurityType)# clearMacTable clearMacTableReq clearAll
Switch(ProvisionMacTableSecurityType)# clearMacTable review
Switch(ProvisionMacTableSecurityType)# clearMacTable commit
Switch(ProvisionMacTableSecurityType)# exit

        Verifying MAC Security

        Use the following command to verify the MAC security status on the Cisco ME 1200 NID .

        • showMacTableLearningReq mode

          This command displays the MAC table learning status. The following is a sample output from the command: 

          Switch(ProvisionMacTableSecurityType)# showmacTablelearning showMacTableLearningReq mode
Switch(ProvisionMacTableSecurityType)# showmacTablelearning review
          Commands in queue:
showMacTableLearning showMacTableLearningReq mode 

          Switch(ProvisionMacTableSecurityType)# showmacTablelearning commit

          Clearing Socket 4 ShowMacTableLearning_Output.showMacTableLearingResp.status[0].interface_ = 1
ShowMacTableLearning_Output.showMacTableLearingResp.status[0].mode = 'Auto'
ShowMacTableLearning_Output.showMacTableLearingResp.status[1].interface_ = 2
ShowMacTableLearning_Output.showMacTableLearingResp.status[1].mode = 'Auto'
ShowMacTableLearning_Output.showMacTableLearingResp.status[2].interface_ = 3
ShowMacTableLearning_Output.showMacTableLearingResp.status[2].mode = 'Auto'
ShowMacTableLearning_Output.showMacTableLearingResp.status[3].interface_ = 4
ShowMacTableLearning_Output.showMacTableLearingResp.status[3].mode = 'Auto'
ShowMacTableLearning_Output.showMacTableLearingResp.status[4].interface_ = 5
ShowMacTableLearning_Output.showMacTableLearingResp.status[4].mode = 'Auto'
ShowMacTableLearning_Output.showMacTableLearingResp.status[5].interface_ = 6
ShowMacTableLearning_Output.showMacTableLearingResp.status[5].mode = 'Auto'
 ShowMacTableLearning Commit Success!!!

        • showMacTableEntriesReq all

          This command displays the list of all MAC entries. The following is a sample output from the command: 

          Switch(ProvisionMacTableSecurityType)# showMacTableEntries showMacTableEntriesReq all
Switch(ProvisionMacTableSecurityType)# showmacTableentries review
          Commands in queue:
	showMacTableEntries showMacTableEntriesReq all 

          Switch(ProvisionMacTableSecurityType)# showmacTableentries commit

          Clearing Socket 4 ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].mac_address = '00:00:0c:07:ac:03'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].mac_address = '00:09:e8:74:36:c5'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].mac_address = '00:14:1b:ec:18:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].mac_address = '00:19:a9:a2:9e:80'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[4].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[4].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[4].mac_address = '00:1c:b0:f5:b4:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[4].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[5].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[5].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[5].mac_address = '00:1c:b1:9a:00:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[5].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[6].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[6].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[6].mac_address = '00:1c:b1:f9:d0:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[6].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[7].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[7].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[7].mac_address = '00:1c:b1:fa:48:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[7].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[8].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[8].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[8].mac_address = '00:3a:99:fd:4b:1c'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[8].ports = ' CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[9].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[9].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[9].mac_address = '18:9c:5d:a7:f4:1c'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[9].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[10].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[10].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[10].mac_address = '33:33:00:00:00:01'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[10].ports = 'GigabitEthernet 1/1-6 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[11].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[11].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[11].mac_address = '33:33:00:00:00:02'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[11].ports = 'GigabitEthernet 1/1-6 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[12].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[12].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[12].mac_address = '33:33:ff:fd:4b:1c'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[12].ports = 'GigabitEthernet 1/1-6 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[13].type = 'Static '
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[13].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[13].mac_address = 'ff:ff:ff:ff:ff:ff'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[13].ports = 'GigabitEthernet 1/1-6 CPU'
 ShowMacTableEntries Commit Success!!!

        • showMacTableEntriesReq interface-id 2

          This command displays the list of all MAC entries for a given interface. The following is a sample output from the command: 

          Switch(ProvisionMacTableSecurityType)# showMacTableEntries showMacTableEntriesReq interface-id 2
Switch(ProvisionMacTableSecurityType)# showmacTableentries review
          Commands in queue:
	
showMacTableEntries showMacTableEntriesReq interface-id 2

          Switch(ProvisionMacTableSecurityType)# showmactableentries commit

          Clearing Socket 4 ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].mac_address = '33:33:00:00:00:01'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].ports = 'GigabitEthernet 1/1-6 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].mac_address = '33:33:00:00:00:02'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].ports = 'GigabitEthernet 1/1-6 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].mac_address = '33:33:ff:fd:4b:1c'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].ports = 'GigabitEthernet 1/1-6 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].mac_address = 'ff:ff:ff:ff:ff:ff'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].ports = 'GigabitEthernet 1/1-6 CPU'

 ShowMacTableEntries Commit Success!!!

        • showMacTableEntriesReq mac-address ff:ff:ff:ff:ff:ff

          This command displays the list of all MAC entries for a given MAC address. The following is a sample output from the command: 

          Switch(ProvisionMacTableSecurityType)# showMacTableEntries showMacTableEntriesReq mac-address ff:ff:ff:ff:ff:ff
Switch(ProvisionMacTableSecurityType)# showmacTableentries review
          Commands in queue:
	showMacTableEntries showMacTableEntriesReq mac_address ff:ff:ff:ff:ff:ff  

          Switch(ProvisionMacTableSecurityType)# showmactableentries commit

          Clearing Socket 4 ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].mac_address = 'ff:ff:ff:ff:ff:ff'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].ports = 'GigabitEthernet 1/1-6 CPU'

 ShowMacTableEntries Commit Success!!!

        • showMacTableEntriesReq static

          This command displays all the static MAC entries. The following is a sample output from the command: 

          Switch(ProvisionMacTableSecurityType)# showMacTableEntries showMacTableEntriesReq static
Switch(ProvisionMacTableSecurityType)# showmacTableentries review
          Commands in queue:
	showMacTableEntries showMacTableEntriesReq static 

          Switch(ProvisionMacTableSecurityType)# showmactableentries commit
          Clearing Socket 4 ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].mac_address = '00:00:0c:07:ac:03'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].mac_address = '00:09:e8:74:36:c5'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].mac_address = '00:14:1b:ec:18:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].mac_address = '00:19:a9:a2:9e:80'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[4].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[4].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[4].mac_address = '00:1c:b0:f5:b4:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[4].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[5].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[5].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[5].mac_address = '00:1c:b1:9a:00:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[5].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[6].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[6].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[6].mac_address = '00:1c:b1:f9:d0:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[6].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[7].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[7].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[7].mac_address = '00:1c:b1:fa:48:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[7].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[8].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[8].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[8].mac_address = '00:3a:99:fd:4b:1c'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[8].ports = ' CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[9].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[9].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[9].mac_address = '18:9c:5d:a7:f4:1c'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[9].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[10].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[10].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[10].mac_address = '33:33:00:00:00:01'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[10].ports = 'GigabitEthernet 1/1-6 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[11].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[11].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[11].mac_address = '33:33:00:00:00:02'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[11].ports = 'GigabitEthernet 1/1-6 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[12].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[12].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[12].mac_address = '33:33:ff:fd:4b:1c'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[12].ports = 'GigabitEthernet 1/1-6 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[13].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[13].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[13].mac_address = 'ff:ff:ff:ff:ff:ff'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[13].ports = 'GigabitEthernet 1/1-6 CPU'
 ShowMacTableEntries Commit Success!!!

        • showMacTableEntriesReq vlan-id 1

          This command displays all the MAC entries for a specified VLAN ID. The following is a sample output from the command: 

          Switch(ProvisionMacTableSecurityType)# showMacTableEntries showMacTableEntriesReq vlan-id 1
Switch(ProvisionMacTableSecurityType)# showmacTableentries review
          Commands in queue:
		showMacTableEntries showMacTableEntriesReq vlan_id 1  

          Switch(ProvisionMacTableSecurityType)# showMacTableEntries commit

          Clearing Socket 4 ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].mac_address = '00:00:0c:07:ac:03'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[0].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].mac_address = '00:09:e8:74:36:c5'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[1].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].mac_address = '00:14:1b:ec:18:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[2].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].mac_address = '00:19:a9:a2:9e:80'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[3].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[4].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[4].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[4].mac_address = '00:1c:b0:f5:b4:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[4].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[5].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[5].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[5].mac_address = '00:1c:b1:9a:00:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[5].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[6].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[6].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[6].mac_address = '00:1c:b1:f9:d0:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[6].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[7].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[7].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[7].mac_address = '00:1c:b1:fa:48:00'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[7].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[8].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[8].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[8].mac_address = '00:3a:99:fd:4b:1c'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[8].ports = ' CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[9].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[9].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[9].mac_address = '18:9c:5d:a7:f4:1c'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[9].ports = 'GigabitEthernet 1/1 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[10].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[10].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[10].mac_address = '33:33:00:00:00:01'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[10].ports = 'GigabitEthernet 1/1-6 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[11].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[11].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[11].mac_address = '33:33:00:00:00:02'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[11].ports = 'GigabitEthernet 1/1-6 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[12].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[12].vlan0_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[12].mac_address = '33:33:ff:fd:4b:1c'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[12].ports = 'GigabitEthernet 1/1-6 CPU'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[13].type = 'Static'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[13].vlan_id = 1
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[13].mac_address = 'ff:ff:ff:ff:ff:ff'
ShowMacTableEntries_Output.showMacTableEntriesResp.macEntries[13].ports = 'GigabitEthernet 1/1-6 CPU'
 ShowMacTableEntries Commit Success!!!

        • showMacAddressCountReq count

          This command displays count of MAC addresses learnt per interface. The following is a sample output from the command: 

          Switch(ProvisionMacTableSecurityType)# showMacTableCount showMacAddressCountReq count
Switch(ProvisionMacTableSecurityType)# showmacTablecount review
          Commands in queue:
	showMacTableCount showMacAddressCountReq count

          Switch(ProvisionMacTableSecurityType)# showmacTablecount commit
          Clearing Socket 4 ShowMacTableCount_Output.showMacAddressCountResp.macCount[0].Interface_id = 1
ShowMacTableCount_Output.showMacAddressCountResp.macCount[0].count = 9
ShowMacTableCount_Output.showMacAddressCountResp.macCount[1].Interface_id = 2
ShowMacTableCount_Output.showMacAddressCountResp.macCount[1].count = 0
ShowMacTableCount_Output.showMacAddressCountResp.macCount[2].Interface_id = 3
ShowMacTableCount_Output.showMacAddressCountResp.macCount[2].count = 0
ShowMacTableCount_Output.showMacAddressCountResp.macCount[3].Interface_id = 4
ShowMacTableCount_Output.showMacAddressCountResp.macCount[3].count = 0
ShowMacTableCount_Output.showMacAddressCountResp.macCount[4].Interface_id = 5
ShowMacTableCount_Output.showMacAddressCountResp.macCount[4].count = 0
ShowMacTableCount_Output.showMacAddressCountResp.macCount[5].Interface_id = 6
ShowMacTableCount_Output.showMacAddressCountResp.macCount[5].count = 0
 ShowMacTableCount Commit Success!!!

        • showMacTableAgingReq agingTimeValue

          This command displays the MAC aging time. The following is a sample output from the command: 

          Switch(ProvisionMacTableSecurityType)# showMacTableAgingTime showMacTableAgingReq agingTimeValue
Switch(ProvisionMacTableSecurityType)# showmactableagingTime review
          Commands in queue:
	showMacTableAgingTime showMacTableAgingReq agingTimeValue 

          Switch(ProvisionMacTableSecurityType)# showmactableagingTime commit
          Clearing Socket 4 ShowMacTableAgingTime_Output.showMacTableAgingResp.macAgingTime = 'MAC Age Time: 300'

 ShowMacTableAgingTime Commit Success!!!