TP-Link T2500G-10MPS T2500G-10MPSUN V1 Configuration Guide - Page 169

Managing MAC Address Table Security Configurations Mac Notification Global Config Notification Global Status : enable Table Full Notification Status: disable Notification Interval : 10 Port LrnMode Change Exceed Max Limit New Mac Learned ---- Gi1/0/1 disable disable enable Switch(config-if)#end Switch#copy running-config startup-config 3.2.2 Limiting the Number of MAC Addresses in VLANs Follow these steps to limit the number of MAC addresses in VLANs: Step 1 Step 2 configure Enter global configuration mode. mac address-table security vid vid max-learn num {drop | forward | disable} Configure the maximum number of MAC addresses in the specified VLAN and select a mode for the switch to adopt when the maximum number is exceeded. vid: Specify an existing VLAN in which you want to limit the number of MAC addresses. num: Set the maximum number of MAC addresses in the specific VLAN. It ranges from 0 to 16383. drop | forward | disable: The mode that the switch adopts when the maximum number of MAC addresses in the specified VLAN is exceeded. drop: Packets of new source MAC addresses in the VLAN will be dropped when the maximum number of MAC addresses in the specified VLAN is exceeded. forward: Packets of new source MAC addresses will be forwarded but the addresses not learned when the maximum number of MAC addresses in the specified VLAN is exceeded. disable: The number limit on the VLAN is not valid, and the switch follows the original forwarding rules. Step 3 Step 4 end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. The following example shows how to limit the number of MAC addresses to 100 in VLAN 10, and configure the switch to drop packets of new source MAC addresses when the limit is exceeded. Switch#configure Switch(config)#mac address-table security vid 10 max-learn 100 drop Switch(config)#show mac address-table security vid 10 Configuration Guide 142