Cisco Cisco VN 2900 Network Adaptation Interface

Use the show mac-address-table static command to verify configuration:

Router#show mac-address-table static

Static Address Table

Destination Address  Address Type  VLAN  Destination Port

-------------------  ------------  ----  --------------------

000a.000b.000c          Static        1  GigabitEthernet0/1/2

To remove a MAC address table, use the clear mac-address-table [dynamic | secure | static] [address 
mac-address] [interface type slot/port] [vlan vlan-id] command in privileged EXEC mode as shown in 
the following example.

Router#clear mac-address-table static address 0040.C80A.2F07 interface gigabitethernet 

Port security can be either static or dynamic. 

Static port security allows the user to specify which devices are allowed access through a given switch 
port. The specification is done manually by placing allowed device MAC addresses in the MAC address 
table. Static port security is also known as MAC address filtering.

Dynamic port security is similar. However, instead of specifying the MAC address of the devices, the 
user specifies the maximum number of devices that will be allowed on the port. If the maximum number 
specified is more than the number of MAC addresses specified manually, the switch will learn the MAC 
address automatically, up to the maximum specified. If the maximum number specified is less than the 
number of MAC addresses already specified statically, an error message will be produced.

Use the mac-address-table secure [mac-address | maximum maximum addresses] gigabitethernet 
0/slot/port [vlan vlan id] command in global configuration mode to specify static or dynamic port 
security. mac-address enables static port security. maximum maximum addresses enables dynamic port 
security.

This section provides the following configuration examples: