Customizing the MAC Address Table
The timeout_value (in minutes) is between 5 and 720 (12 hours). 5 minutes is the default.
Disabling MAC Address Learning
By default, each interface automatically learns the MAC addresses of entering traffic, and the FWSM
adds corresponding entries to the MAC address table. You can disable MAC address learning if desired,
however, unless you statically add MAC addresses to the table, no traffic can pass through the FWSM.
To disable MAC address learning, enter the following command:
hostname(config)# mac-learn interface_name disable
The no form of this command reenables MAC address learning. The clear configure mac-learn
command reenables MAC address learning on all interfaces.
Viewing the MAC Address Table
You can view the entire MAC address table (including static and dynamic entries), the MAC address
table for an interface, or the MAC address table for a bridge group. To view the MAC address table, enter
the following command:
hostname# show mac-address-table [interface_name | bridge_group]
The following is sample output from the show mac-address-table command that shows the entire table:
hostname# show mac-address-table
interface
-----------------------------------------------------------------------
outside
inside
inside
The following is sample output from the show mac-address-table command that shows the table for the
inside interface:
hostname# show mac-address-table inside
interface
-----------------------------------------------------------------------
inside
inside
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
19-4
mac address
type
0009.7cbe.2100
static
0010.7cbe.6101
static
0009.7cbe.5101
dynamic
mac address
type
0010.7cbe.6101
static
0009.7cbe.5101
dynamic
Chapter 19
Configuring ARP Inspection and Bridging Parameters
Age min)
Group
-
Eng
-
Eng
10
Eng
Age min)
Group
-
Eng
10
Eng
OL-20748-01