SecureStack does not Permit a User to be Statically MacLocked to more than One Port

  • 0
  • 1
  • Article
  • Updated 4 years ago
  • (Edited)
Article ID: 11497 

SecureStack C3, C2, B3, B2, A2

Enabled MAC Locking (i.e. 'set maclock enable').
Created a static maclock entry for a MAC and Port (e.g. 'set maclock 00:12:34:AB:CD:EF ge.1.2 create').
Created a static maclock entry for the same MAC but a different port in the stack.
Effectively, attempting to lock the same device on two different stack ports.

Received an error message from the CLI:
Set failed for  <port#>

For example, here is the final command entry and the resulting error message in this scenario:
C3(su)->set maclock 00:12:34:AB:CD:EF ge.1.1 create
Set failed for ge.1.1

And, here is the corresponding SNMP Error that may be sent to the NMS:
Failed to set the static locked address [<Colon-delimited user MAC address>] on  <System IP addressPort [<Ethernet port#>]. MAC Locking may be disabled or unsupported for this port, the maximum number of allowed static MACs may have been exceeded, or the MAC Address may already be locked to this port or another port on the same device. ERROR: SNMP Error: Commit Failed (14). The attribute(s) contained in the failed SNMP packet were: etsysMACLockingStaticEntryRowStatus. (CreateAndGo)

Functions as Designed (FAD).

The same MAC address cannot be statically MAC Locked on more than a single port per stack.

The product Configuration Guides 'set maclock' section, and the Release Notes 'Known Restrictions and Limitations' section, state:
Static MAC locking a user on multiple ports is not supported.
Photo of FAQ User

FAQ User, Official Rep

  • 13,590 Points 10k badge 2x thumb

Posted 4 years ago

  • 0
  • 1

There are no replies.

This conversation is no longer open for comments or replies.