1-13
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring the Transparent or Routed Firewall
Monitoring the Transparent Firewall
Disabling MAC Address Learning
By default, each interface automatically learns the MAC addresses of entering traffic, and the ASA adds
corresponding entries to the MAC address table. You can disable MAC address learning if desired,
however, unless you statically add MAC addresses to the table, no traffic can pass through the ASA.
To disable MAC address learning, enter the following command:
Monitoring the Transparent Firewall
• Monitoring ARP Inspection, page 1-13
• Monitoring the MAC Address Table, page 1-13
Monitoring ARP Inspection
To monitor ARP inspection, perform the following task:
Monitoring the MAC Address Table
You can view the entire MAC address table (including static and dynamic entries for both interfaces), or
you can view the MAC address table for an interface. To view the MAC address table, enter the following
command:
Examples
The following is sample output from the show mac-address-table command that shows the entire table:
hostname# show mac-address-table
interface mac address type Time Left
-----------------------------------------------------------------------
outside 0009.7cbe.2100 static -
inside 0010.7cbe.6101 static -
inside 0009.7cbe.5101 dynamic 10
Command Purpose
mac-learn interface_name disable
Example:
hostname(config)# mac-learn inside disable
Disables MAC address learning.
The no form of this command reenables MAC address learning. The clear
configure mac-learn command reenables MAC address learning on all
interfaces.
Command Purpose
show arp-inspection
Shows the current settings for ARP inspection on all interfaces.
Command Purpose
show mac-address-table [interface_name]
Shows the MAC address table.
To Next Page
Loading...
Need help?
General
