MAC-based security allows you to control the way the FDB (forwarding database) is learned and populated. By managing entries in the FDB, you can block and control packet flows on a per-address basis.
MAC-based security allows you to limit the number of dynamically-learned MAC addresses allowed per virtual port. You can also “lock” the FDB entries for a virtual port, so that the current entries will not change, and no additional addresses can be learned on the port.
You can also prioritize or stop packet flows based on the source MAC address of the ingress VLAN (Virtual LAN) or the destination MAC address of the egress VLAN.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB