MAC Address Traffic Filter

http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_guide_chapter09186a0080160a59.html#wp1074871

Router(config)# mac-address-table static mac_address vlan vlan_ID drop

Blocks all traffic to or from the configured MAC address in the specified VLAN.



Router(config)# no mac-address-table static mac_address vlan vlan_ID

Clears MAC address-based blocking.





http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_guide_chapter09186a008007fb16.html#40361

Console> (enable) set cam static filter 00-02-03-04-05-06 1



Filter entry added to CAM table.

Console> (enable)





This example shows how to clear the filter:



Console> (enable) clear cam 00-02-03-04-05-06 1



CAM entry cleared.

Console> (enable)





port security 적용시

mac address 가 다른 port에 등록이 되어 있어 port 가 shutdown 될때



sh cam xx-xx-xx-xx-xx 로 해당mac가 등록 되어 있는 포트를 찾고

해당 port를 reset 후 clear cam xx-xx-xx-xx-xx 를 한 후

상태 확인.