[f-nsp] MAC security per VLAN

Mitchell Warden wardenm at wardenm.net
Tue Jul 17 17:09:40 EDT 2012


Hi Alexander

> I need to disable MAC learning only in one VLAN, in other VLANs MAC
> learning should be enabled without any limits.
> 
> In 'port security' configuration section of interface I can set up
> static MAC addresses in certain VLAN, but I cannot disable MAC learning 
> per VLAN: 'dynamic-learn' command does not have VLAN parameter.
> 
> Is there a way to achieve this? Thanks in advance!
> 


Have you looked at the 'transparent-hw-flooding' option? It's applied under the vlan configuration. It will turn off MAC learning for the VLAN.

Cheers.
Mitchell





More information about the foundry-nsp mailing list