Filter
Top Products
116 CHAPTER 5: VLAN COMMANDS
display security
12-restrict
Displays configuration information and statistics for Layer 2 forwarding
restriction.
Syntax —
display security 12-restrict [vlan vlan-id | all]
vlan-id
— VLAN name or number.
all — Displays information for all VLANs.
Defaults — If you do not specify a VLAN name or all, information is
displayed for all VLANs.
Access — Enabled.
History —Introduced in MSS Version 4.1.
Examples — The following command shows Layer 2 forwarding
restriction information for all VLANs:
VLAN Name En Drops Permit MAC Hits
---- ----------- -- ---------- ------------------- ----------
1 default Y 0 00:0b:0e:02:53:3e 5947
00:30:b6:3e:5c:a8 9
2 vlan-2 Y 0 04:04:04:04:04:04 0
Table 23 describes the fields in the display.
Table 23 Output for display security 12-restrict
Field Description
VLAN VLAN number.
Name VLAN name.
En Enabled state of the feature for the VLAN:
Y — Enabled. Forwarding of Layer 2 traffic from clients
is restricted to the MAC address(es) listed under Permit
MAC.
N — Disabled. Layer 2 forwarding is not restricted.
Drops Number of packets dropped because the destination MAC
address was not one of the addresses listed under Permit
MAC.
Permit MAC MAC addresses to which clients in the VLAN are allowed
to send traffic at Layer 2.