Cisco ASR 920 series Configuration Guide Ethernet Router

Configuring a MAC Address Deny List
Perform this task to configure a list of MAC addresses that are not allowed on a service instance that is a
member of a bridge domain.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
interface type number
4.
service instance id ethernet
5.
encapsulation dot1q vlan-id
6.
bridge-domain bridge-id
7.
mac security address deny mac-address
8.
mac security address deny mac-address
9.
mac security address deny mac-address
10.
mac security address deny mac-address
11.
mac security address deny mac-address
12.
mac security
13.
end
DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode.enable
Step 1
Example:
Device> enable
•
Enter your password if prompted.
Enters global configuration mode.configure terminal
Example:
Device# configure terminal
Step 2
Specifies the interface type and number, and enters
interface configuration mode.
interface type number
Example:
Device(config)# interface gigabitethernet2/0/1
Step 3
Carrier Ethernet Configuration Guide (Cisco ASR 920 Series)
96
Configuring MAC Address Limiting on Service Instances Bridge Domains and EVC Port Channels
Configuring a MAC Address Deny List

Cisco ASR 920 series Specifications

General

Form Factor	1RU
Operating System	Cisco IOS XE
Model	ASR 920 series
Memory	4 GB DRAM
Power Supply	AC or DC
Storage Temperature	-40°C to 70°C (-40°F to 158°F)
Relative Humidity	5% to 95% non-condensing
MTBF	Varies by model
Management	CLI, SNMP