EPC3010 MAC Address Aging

The spec sheet does not say a lot about the bridge forwarding table.
Could someone tell me the number of MAC addresses that the forwarding table can hold.
Also are there SNMP OIDs for controlling how quickly entries in the forwarding table will time out, or for deleting entries in the forwarding table?

The Add option allows you to add Ethernet MAC addresses for devices that might pass traffic through the bridge. If no addresses are added through the Add option, the bridge learns the first eight MAC addresses that pass through its Ethernet Port. Subsequently, only data from those addresses is allowed to pass through the bridge.
Caution: The first MAC address you add should be that of the PC you are using to Telnet or browse to
the bridge.
You should add MAC addresses if there are more than eight Ethernet devices attached to the hub to
which the bridge is connected. This ensures that the selected devices communicate through the bridge. After an address is added, the bridge won't learn any more addresses. You must type each MAC address you wish to have communicate through the bridge (up to eight).
Once you enter the first MAC address, the MAC addresses of every other device that you want the
bridge to communicate with must be entered. The process is not automatic and the bridge will no longer "learn" any addresses. The addresses must be manually entered.

Similar Messages

  • Arp aging time on router and mac address aging time on switches set close t

    Hi,
    appreciate some advice on the following:
    what is the benefit of setting arp aging time on router and mac address aging time on switches close to each other?
    Thanks,
    Christina

    Hi,
    based on the below output, do you think implementing it will benefit? Thanks.
    C2950#sh int fa0/43
    FastEthernet0/43 is up, line protocol is up (connected)
    Hardware is Fast Ethernet, address is 000d.5e11.4e2b (bia 000d.5e11.4e2b)
    MTU 1500 bytes, BW 100000 Kbit, DLY 1000 usec,
    reliability 255/255, txload 7/255, rxload 2/255
    Encapsulation ARPA, loopback not set
    Keepalive set (10 sec)
    Full-duplex, 100Mb/s
    input flow-control is off, output flow-control is off
    ARP type: ARPA, ARP Timeout 04:00:00
    Last input never, output 00:00:00, output hang never
    Last clearing of "show interface" counters never
    Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
    Queueing strategy: fifo
    Output queue: 0/40 (size/max)
    5 minute input rate 933000 bits/sec, 149 packets/sec
    5 minute output rate 2981000 bits/sec, 263 packets/sec
    2819781393 packets input, 3782332886 bytes, 0 no buffer
    Received 266693 broadcasts (0 multicast)
    0 runts, 0 giants, 0 throttles
    0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
    0 watchdog, 0 multicast, 0 pause input
    0 input packets with dribble condition detected
    4015025747 packets output, 2328228393 bytes, 0 underruns
    0 output errors, 0 collisions, 2 interface resets
    0 babbles, 0 late collision, 0 deferred
    0 lost carrier, 0 no carrier, 0 PAUSE output
    0 output buffer failures, 0 output buffers swapped out
    C2950#

  • Dot1x disable mac-address aging

    Hi, all!
    I have configured dot1x on 3560 switches on my network. Switches have been configured to send MAC notification traps. I have set mac address-table aging time to 1800 sec. but only 802.1x not enabled switch send trap periodically.  It seem dot1x technilogy disable mac-address aging process.
    Can anybody explain it.

    You can control mac-address learning for a VLAN by using this switchport command on a trunk.
    Router(config-if)# switchport port-security maximum 3 vlan 102
    Or simply use this to allow only a certain number of mac's per access port.
    Router(config-if)# switchport port-security maximum 1
    Here is the command reference.
    http://www.cisco.com/univercd/cc/td/doc/product/software/ios122sr/cr/srir_r/ir_s4sr.htm#wp1015189
    PS: you cannot totally stop mac learning as the valid values are from 1-4097 so you cant set it to zero and i believe you dont want to as well , since you have a layer2/3 environment.
    HTH-Cheers,
    Swaroop

  • 3750 mac-address-aging timer

    Hi,
    i'm trying to change mac-address timers but having problems, i.e the change I’m trying to change mac-address-aging timers but having problems, i.e. the change only applies to existing active vlans. if i add new vlan after changing mac-address-aging timer it will have default value 300. Is this way it works or I’m missing something?
    3750-sw-1(config)#mac-ad aging-time 1300
    3750-sw-1#sh mac-ad ag
    Vlan Aging Time
    10 1300
    20 1300
    30 1300
    3750-sw-1#! Now adding a new vlan
    3750-sw-1#conf t
    3750-sw-1(config)#vlan 40
    3750-sw-1 (config-vlan
    3750-sw-1#sh mac-ad ag
    Vlan Aging Time
    10 1300
    20 1300
    30 1300
    40 300
    New vlan 40 has default value????

    Just checked the command reference. In the usage guidelines it states:
    Usage Guidelines
    If hosts do not send continuously, increase the aging time to record the dynamic entries for a longer time. Increasing the time can reduce the possibility of flooding when the hosts send again.
    If you do not specify a specific VLAN, this command sets the aging time for all VLANs.
    The last sentence is relevant to your question. The command may also be issued on a particular vlan.
    New vlans are created after setting this parameter globally will hence be using the default values.
    The key issue to check if this is a bug or not is to check whether the global command is reflected in the config. If it was, I would call the issue a bug.
    As it is not, you must approach this as a parameter that can (and should) be set per vlan. After creating a new vlan, you may add this line in the script or re-issue the global command.
    Regards,
    Leo

  • ISE Identities - Lifetime/Age-Out of Mac-Addresses

    Hello,
    is there a way to have the Mac-Addresses/Identities in the ISE-Database age-out after a certain amount of time (i.e. 4 weeks).
    Beste regards

    Here are some screenshot for the same

  • How to make mac address gmail contacts overwrite the ones on my HTC Android phone - I don't want to sync - that makes the phone scramble and overwrite my computer.  I want to remove or correctly overwrite the phone information as I have done with iPad.

    Please help - I am beginning to hate google, my android and gmail.  I have just wasted about 5 hours in a futile attempt to try and get my current Mac contacts list on my computer updated to my phone. I'm not that computer literate but I have looked up about google phone accounts, vCards, backing up contact lists, what SD on phones are, and God know what else.  I have searched the internet and tried all sorts of things and I still have a mac with a now correct contact list (after the iPad contacts scrambled it and I spent ages manually correcting them all) and a phone with an outdated contact list.  If you try and sync them the phone wants to overwrite the computer one just like the iPad did (would it be so **** hard to give you a choice on the phone as to which overwrites which!).  After all the  advice on the internet failed, I got the bright idea to completely delete all the ones on the phone and if it was empty of contacts the computer one could be exported to it.  Not as simple as it sounds.  First I backed up (I think) my computer contacts list. Numerous futile attempts to go through the phone options to globally delete all contacts did not work - they gave a warning message and you got to choose whether to continue or not, I did, and it looked like it might be working as it changed to zero data on the phone, but then they all popped back up again from God knows where from, but without their little added bits like pictures of the people.  So, I tried un- syncing the darn phone from  google and then deleting them globally.  That didn't work either.  I tried deleting them  all again and again and google would crash and not let me do it. It is absolutely ridiculous that this is so damned difficult to do (especially if you are not computer savvy) and that you cannot choose which device overwrites which when syncing. I gave up and ticked sync with Google again (not that it appears to do anything to the phone contact list at all).  So after 5 hours I am back to where I started from, with a phone showing all the same  incorrect contacts (but the pictures are back), which wants to overwrite the computer if I try any sort of sync, and no way to fix them except go into each one manually and try and do it - and how long would that take (and I've already wasted hours and hours fixing scrambled contact lists!).  I think I will do a print out of the computer contact list and just carry it around with me like an address book - so much bloody simpler.  So now I have a headache, am fighting an overwhelming urge to hurl the phone at the wall,  hoping for a heat wave to evaporate icloud things and am wishing I had bought an iPhone instead of the stupid HTC Android.  Can any one offer me any suggestions on how to get rid of the contacts on my phone and replace them with the ones in my mac address list - hopefully after that  they can sync to their hearts content and not stuff everything up again (which was why I unsynced google a while back - because the phone's list kept making stuff ups and scrambling and duplicating my computer contacts list).  Am I the only one on the planet having this problem or is there someone else out there who has had it and solved it.

    Without "pretending" to be yourself on the other phone (change settings) there's nothing else you can do.
    iOS devices are meant to be single user and can't view iCloud.com the same way a Mac or PC can do.
    You need to find a desktop or laptop machine (Mac or PC) to log in at iCloud.

  • 6509E with Sup720 - Show mac address

    I have seen very strange behavior. The following two commands show different outputs...
    core2#sho mac address-table dynamic | in cc04
         7  0009.0fbb.cc04   dynamic  Yes        150   Po10
    core2#sho mac address-table address 0009.0fbb.cc04
    Legend: * - primary entry
            age - seconds since last seen
            n/a - not available
      vlan   mac address     type    learn     age              ports
    ------+----------------+--------+-----+----------+--------------------------
    No entries present.
    Po10 is etherchannel to core1. The MAC address is on the core2 and should never be learned on core1. Core1 doesn't learn this MAC address at all.
    The commands are run at the same time. I repeated many times and it is the same... Any idea why?
    Thanks!
    Difan

    Hi Jon,
    Correct, I am not using VSS. However it is not standard set up. The vlan 7 is extended to many other switches. The root is actually not core1 or core2. It also passes some provider to different location as well. However like you said, all the correct ports are blocked. Please trust me on this.. If there is a loop, we will have much more serious problem... At least our CPU will hike and link will congested, right?
    I know your concern that the same packet could be somehow loopped back through core1, which makes core2 to learn the MAC on the port-channel interface to core1. However when this happens, core1 doesn't learn the MAC anywhere and on core2 some command show the MAC but not the other command...
    Also something interesting, even that MAC in the command will eventually disappear. Please note the aging time. The aging time configured on the vlan is 480 seconds. At last the MAC address is pointing to another interface like G1/1. That interface doesn't even have vlan 7 allowed on the trunk link.
    core2#sho mac address-table address 0009.0fbb.cc04
    Legend: * - primary entry
            age - seconds since last seen
            n/a - not available
      vlan   mac address     type    learn     age              ports
    ------+----------------+--------+-----+----------+--------------------------
    No entries present.
    core2#
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        285   Po10
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        290   Po10
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        300   Po10
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        305   Po10
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        315   Po10
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        320   Po10
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        320   Po10
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        330   Po10
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        335   Po10
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        340   Po10
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        375   Po10
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        405   Po10
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        425   Po10
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        465   Gi1/1
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        480   Gi1/1
    core2#show mac address-table | in 0009.0fbb.cc04
         7  0009.0fbb.cc04   dynamic  Yes        480   Gi1/1
    core2#show mac address-table | in 0009.0fbb.cc04
    core2#show mac address-table | in 0009.0fbb.cc04
    core2#sho mac address-table address 0009.0fbb.cc04
    Legend: * - primary entry
            age - seconds since last seen
            n/a - not available
      vlan   mac address     type    learn     age              ports
    ------+----------------+--------+-----+----------+--------------------------
    No entries present.
    core2#sh int g1/1 trunk
    Port                Mode         Encapsulation  Status        Native vlan
    Gi1/1               on           802.1q         trunking      1
    Port                Vlans allowed on trunk
    Gi1/1               64,72,156,214-216,300,600
    Port                Vlans allowed and active in management domain
    Gi1/1               64,72,156,214-216,300,600
    Port                Vlans in spanning tree forwarding state and not pruned
    Gi1/1               64,72,156,214-216,300,600
    Is it a bug?
    Thanks!

  • Switch learning mac addresses

    In a video that I watched a few days ago someone explained a basic process of booting up a switch and how a switch learns mac addresses. He said something that I would like to discuss. I know... it is not important but want to clarify :)
    PC1---SW1----PC2
    PC1 wants to send sth to PC2. In the video it was said:
    'a frame arrives at SW1 and SW1 learns the mac address of pc1 but it does not know the mac address of pc2 so it will flood this frame to all ports'
    My uderstanding is that it all starts with an arp message: pc1 does not know the mac address and sends an arp and it will allow the switch to learn both mac addresses: pc1 and pc2. I am too lazy to do it in wireshark but did that in PT and that's what I saw as well. After the arp - switch learnt both macs and did not flood the frame.
    Am I correct? I know it is not important but... ;-)

    It may be possible that there was some aspect of the switch environment in the video that would change the behavior (perhaps something like a long timer for the ARP cache in the PC and a short MAC ageing timer on the switch). But in general you are correct. PC1 would send an ARP request as a broadcast, the switch would learn the MAC of PC1 and forward the ARP request. When PC2 sends its response to the ARP request the switch would learn the MAC of PC2 and forward the ARP response. So the switch should have both MAC addresses when data traffic begins to flow.
    HTH
    Rick

  • How to verify VPLS mac-address forwarding

    I think VPLS know how to forward by mac-address. but how to verify it ?
    for example I show mac-address vlan 100. But I can not find a command to verify How mac-address is forwarding ?
    at 6509:
    PA_C76_1>sh mpls l2transport vc
    Local intf Local circuit Dest address VC ID Status
    VFI PA-LA-test VFI 203.160.227.88 100 UP
    VFI PA-LA-test VFI 203.160.227.95 100 UP
    PA_C76_1>show mac-address-table vlan 100
    Legend: * - primary entry
    age - seconds since last seen
    n/a - not available
    vlan mac address type learn age ports
    ------+----------------+--------+-----+----------+--------------------------
    * 100 000b.45b6.bc40 dynamic Yes 95 Router
    * 100 0012.d946.59c1 dynamic Yes 10 Gi4/1

    Hi,
    VPLS provides the medium to for a E-LAN, and in Cisco implementations, the MAC learning is not actually done by a VPLS instance.
    This can be best explained by an example.
    PE(SW)-A ---- PE(SW)-B
    PE(SW)-C
    Now these three PE nodes under VPLS, are only provided the medium to connect to each other using P2P PW forming a full mesh.
    For simplicity you can assume they are three switches connected in the above manner using copper. So this copper connecitivity is provided by VPLS.
    And at the end of the day the end nodes learn mac addresses using the conventional method of flooding and learning. So you wont find any VPLS specific commands to see what mac address is the VPLS instance flooding. As its only providing a medium for connectivty. And the flooding is done by the end nodes. as they treat the VPLS VC as one of the outgoing port.
    HTH-Cheers,
    Swaroop

  • Use Cisco ACS to verify MAC address for VPN User

    Question: I want to have the MAC address of a machine checked when the user is logging into VPN Client.
    For example:
    User opens VPN client-->Clicks connect-->types in User/Pass which gets passed to ACS (part of what should be sent is the MAC address)---> ACS responds with a yes/no on user/pass and whether the MAC address is right)

    Hi Pete,
    I have found out in some of my testings that If a PC doesnot genareate any kind of traffic and is totally ideal and once the MAC-address table ages out, it doesnot show its MAC untill the PC generates some kind of traffic.I guess this is what you must be seeing.
    I have oberved one more thing that If I connect a fully booted PC which not generating any traffic to a switch port it doesnot learn its Mac-address untill its generates the traffic. This is what my obeservations is and that what I believe in most of the cases.
    i dont know whether that answer your question or not but it could be something closer. I think there will be some who can put some more ligth on this.
    regards,
    -amit singh

  • Sh mac-address command in Cisco RSP4

    Hello guys,
    Need your ideas on how to know to which port a device connected to using mac-address information on Cisco DLSw RSP4.
    I did tried using command "sh mac-address add" but it is not recognized in this IOS.
    See below outputs:
    RSP-Core#sh ver
    Cisco Internetwork Operating System Software
    IOS (tm) RSP Software (RSP-DSV-M), Version 12.1(13), RELEASE SOFTWARE (fc3)
    Copyright (c) 1986-2002 by cisco Systems, Inc.
    Compiled Wed 30-Jan-02 13:58 by kellythw
    Image text-base: 0x60010958, data-base: 0x61186000
    cisco RSP4 (R5000) processor with 131072K/2072K bytes of memory. >>>>>>>>>
    R5000 CPU at 200Mhz, Implementation 35, Rev 2.1, 512KB L2 Cache
    RSP-Core>sh ip arp tok 1/1/0
    Protocol Address Age (min) Hardware Addr Type Interface
    Internet 146.X.3.76 5 0060.9435.63e2 SNAP TokenRing1/1/0
    Internet 146.X.3.77 5 4000.2030.2410 SNAP TokenRing1/1/0
    RSP-Core#sh mac-address add ?
    % Unrecognized command
    RSP-Core#sh mac-

    Interesting hardware you have there.
    Is this perhaps a cat 5xxx with an RSM module?
    In that case, the RSM is in fact a router blade.
    The command "sh mac-adress " is only found on switches. This info is there already but you need to get it from the supervisor which will be running CatOS.
    http://www.cisco.com/en/US/docs/switches/lan/catalyst5000/catos/4.5/configuration/guide/5000_cfg.html
    regards,
    Leo

  • How to get MAC Address of my stolen HP-15d103tx laptop

     I do have my Serial No-[Moderator edited Serial] and product no- G2G48PA#ACJ. My laptop has been stolen on 2nd April 2015. When i lodge a F.I.R with police they told me to submit the MAC address of the Laptop. Is there any way to know my mac address? Please suggest .

    Alok_456 wrote:
     I do have my Serial No-[Moderator edited Serial] and product no- G2G48PA#ACJ. My laptop has been stolen on 2nd April 2015. When i lodge a F.I.R with police they told me to submit the MAC address of the Laptop. Is there any way to know my mac address? Please suggest .
    If you didn't write it down the first time it will almost next to impossible to find it also this doesn't gurantee in any way you can get your laptop back either. MAC is only good if you wrote it down or registered it but if none of this is written down. And if you don't have tracking software installed the chances of getting it back is harder to get it back. So unless you see it being sold by someone or online this is the only real way you can track it down.
    I am a Volunteer to help others on here-not a HP employee.
    Replies aren't online 24/7 because of Time Zone differences.
    Remember in this Day and Age of Computing the Internet is Knowledge at your fingertips if you choose understand it. -2015-

  • ACS v4.1 PEAP and MAC Address Validation

    I would like to authenticate to a ACS server via both 802.1x (PEAP) and to also validate the MAC Address of the user. Can both of these be done? I have 802.1x (PEAP) working to the ACS and Active Directory but now I would like to add the MAC Address of the laptops. Can I use Network Access Profiles and add the MAC-address under MAC-Authentication bypass?
    Your assistance is appreciated.

    I seem to have figured my way out of this. The reason for the short dot1x timer is that we are using MAB to authenticate the client MAC, so we actually WANT the dot1x authentication to timeout as quickly as possible for the secondary (MAB) authentication to execute.
    I'm also suffering from the age-old problem of interpreting the logic of a config originally implemented by someone else. I'm wondering if all the dot1x commands we have are actually necessary in our situation.
    What I have found when comparing new switches to old is that on the 3750s, show authentication sessions for an interface only shows mab as a runnable method, while on the 3850s it lists dot1x, mab and webauth (in that order). Using authentication order mab and authentication priority mab on an interface of the 3850 seems to do the trick. With debug mab turned on you can see the mab authentication working and the switch then allows the interface to pass traffic. Just as importantly, it blocks the port if I try using a client whose MAC is not in the ACS database.
    Appreciate your help.

  • MAC address on 2950

    Hi...
    Whenever I telnet to the switch that my PC is connected to and type sho arp I get all the IP addresses of PCs connected to the switch while the hardware address is the same for all of them.
    How can I get the mac addresses of the PCs connected to the ports?
    Thanks

    You should be getting the correct hardware address if the PCs are directly connected to the switch.
    If you are connecting a group of PCs that pass through a router, then the single MAC that you are seeing is the MAC of the router interface connecting to the 2950.
    To get the real MACs of the PCs, you'd need to look at the ARP table of the router.
    Here's a sh arp from my switch:
    Smack_2950#sho arp
    Protocol Address Age (min) Hardware Addr Type Interface
    Internet 172.16.1.254 190 000a.4144.d4bd ARPA Vlan1
    Internet 172.16.1.198 3 0004.75db.07b9 ARPA Vlan1
    Internet 172.16.1.57 74 00d0.5836.f441 ARPA Vlan1
    Internet 172.16.1.29 - 0009.b74a.9580 ARPA Vlan1
    Internet 172.16.1.127 81 0013.6042.8a8d ARPA Vlan1
    Internet 172.16.1.77 0 0002.b349.c8c8 ARPA Vlan1
    Smack_2950#
    You might also try a sh mac-address-table, it'll give you MAC and switch-port that the MAC is connected to.
    Here's an example:
    Smack_2950#show mac-address-table
    Mac Address Table
    Vlan Mac Address Type Ports
    All 0009.b74a.9580 STATIC CPU
    All 0100.0ccc.cccc STATIC CPU
    All 0100.0ccc.cccd STATIC CPU
    All 0100.0cdd.dddd STATIC CPU
    1 0002.b349.c8c8 DYNAMIC Fa0/24
    1 0002.b349.c965 DYNAMIC Gi0/1
    1 0004.75db.07b9 DYNAMIC Fa0/23
    1 000a.4144.d4bd DYNAMIC Fa0/18
    1 000d.613b.28e5 DYNAMIC Gi0/1
    1 000e.a62d.abf1 DYNAMIC Gi0/1
    1 000f.f73a.bc4d DYNAMIC Fa0/19
    1 0010.7be7.a772 DYNAMIC Fa0/21
    1 0011.240d.960f DYNAMIC Fa0/19
    1 0013.6042.8a8d DYNAMIC Fa0/20
    1 0030.4821.e689 DYNAMIC Fa0/24
    1 00d0.5836.f441 DYNAMIC Fa0/22
    56 0001.5c22.9982 DYNAMIC Fa0/12
    56 000a.4144.d4bc DYNAMIC Fa0/13
    100 0000.0c4a.5eca DYNAMIC Fa0/1
    100 00c0.7b4c.9325 DYNAMIC Fa0/2
    200 0000.0c5d.b3ee DYNAMIC Fa0/3
    400 0010.7b80.2ecd DYNAMIC Fa0/8
    300 0000.0c5c.f28c DYNAMIC Fa0/7
    Total Mac Addresses for this criterion: 23
    Smack_2950#
    Check it out and let us know what you find.
    FWIW
    Scott

  • Cannot determine MAC address of connected Access Point using Access Connections version 5

    I recently installed the newst version of Access Connections (version 5) and discovered I am unable to determine the MAC address of the connected access point.  The 'Graphical' screen shows the SSID, IP address of client etc - but does not show the MAC address of the access point.  The 'Details' screen shows the MAC address of the access points - but the radial button on the left does not indicate the cfurrently associated access point.

    Is it the switch where the node is directly connected ?
    Is the NIC at node side, working fine ?
    Another fact to consider is, a mac will wipe itself out after the MAC-age timeout.
    Parvesh

Maybe you are looking for