https://community.extremenetworks.com/t5/extremeswitching-eos/how-to-clear-maclock-quot-last-violating-mac-address-quot-field/m-p/58058#M1245 I have found the only way to clear this is with a switch reset, or when another "violating" user is plugged into the port in question. The MAC address stays in the switch so when a "violating" user plugs into the switch, it can be viewed at a later time even though they are no longer plugged in. This is not a field that can be administratively cleared <BR /> <BR /> Thu, 02 Nov 2017 19:45:00 GMT Careno__Ryan 2017-11-02T19:45:00Z https://community.extremenetworks.com/t5/extremeswitching-eos/how-to-clear-maclock-quot-last-violating-mac-address-quot-field/m-p/58055#M1242 For many years our C5 stacks (edge switches) have the following configuration for all edge ports...<BR /> set maclock enable<BR /> set maclock trap enable violation<BR /> set maclock agefirstarrival enable<BR /> set maclock firstarrival 8<BR /> set maclock enable <BR /> <BR /> This was recommended by an Enterasys Engineer to protect the network from loops, mac floods and notify us if a port has more than 8 devices (we use macauth/multiauth; C5 limit is 8 devices).<BR /> <BR /> Over the years the system has worked well except for once in a while (due to a firmware bug) the maclock firstarrival # needs to be increased for a total of 8 devices to be allowed (only happens when switch has been running for months and a reboot fixes things).<BR /> <BR /> When I run "show maclock" I see...<BR /> Port Port Trap Syslog Aging Port Clr Max Max Last Violating Number Stat Thr|Viol Thr|Viol Stat Dis|Viol OLC Stc FA MAC Address -------- ---- -------- -------- ---- -------- --- --- ---- -----------------<BR /> ge.2.37 ena dis|ena dis|dis ena dis|dis ena 20 8 c0:3f:d5:f6:23:73<BR /> Short of rebooting the switch, how do I clear the "Last Violating Mac Address"?<BR /> <BR /> Have tried Policy Manager's Maclock tab; when I select an entry, the "Remove" button remains greyed out.<BR /> <BR /> Thanks<BR /> Nabil Thu, 02 Nov 2017 02:33:00 GMT https://community.extremenetworks.com/t5/extremeswitching-eos/how-to-clear-maclock-quot-last-violating-mac-address-quot-field/m-p/58055#M1242 Naoman_Ghani 2017-11-02T02:33:00Z https://community.extremenetworks.com/t5/extremeswitching-eos/how-to-clear-maclock-quot-last-violating-mac-address-quot-field/m-p/58056#M1243 How about the following command:<BR /> <BR /> clear maclock c0:3f:d5:f6:23:73 ge.2.37<BR /> <BR /> Ryan Thu, 02 Nov 2017 02:42:00 GMT https://community.extremenetworks.com/t5/extremeswitching-eos/how-to-clear-maclock-quot-last-violating-mac-address-quot-field/m-p/58056#M1243 Careno__Ryan 2017-11-02T02:42:00Z https://community.extremenetworks.com/t5/extremeswitching-eos/how-to-clear-maclock-quot-last-violating-mac-address-quot-field/m-p/58057#M1244 The result is "The specified entry does not exist." <span class="lia-unicode-emoji" title=":disappointed_face:">😞</span><BR /> <BR /> Switch firmware version is 06.81.07.0004<BR /> <BR /> Thu, 02 Nov 2017 03:09:00 GMT https://community.extremenetworks.com/t5/extremeswitching-eos/how-to-clear-maclock-quot-last-violating-mac-address-quot-field/m-p/58057#M1244 Naoman_Ghani 2017-11-02T03:09:00Z https://community.extremenetworks.com/t5/extremeswitching-eos/how-to-clear-maclock-quot-last-violating-mac-address-quot-field/m-p/58058#M1245 I have found the only way to clear this is with a switch reset, or when another "violating" user is plugged into the port in question. The MAC address stays in the switch so when a "violating" user plugs into the switch, it can be viewed at a later time even though they are no longer plugged in. This is not a field that can be administratively cleared <BR /> <BR /> Thu, 02 Nov 2017 19:45:00 GMT https://community.extremenetworks.com/t5/extremeswitching-eos/how-to-clear-maclock-quot-last-violating-mac-address-quot-field/m-p/58058#M1245 Careno__Ryan 2017-11-02T19:45:00Z