SecureStack does not Permit a User to be Statically MacLocked to more than One Port

FAQ_User — Tue, 15 Apr 2014 22:43:00 GMT

Article ID: 11497

Products
SecureStack C3, C2, B3, B2, A2

Changes
Enabled MAC Locking (i.e. '

code:

set maclock enable

').
Created a static maclock entry for a MAC and Port (e.g. '

code:

set maclock 00:12:34:AB:CD:EF ge.1.2 create

').
Created a static maclock entry for the same MAC but a different port in the stack.
Effectively, attempting to lock the same device on two different stack ports.

Symptoms
Received an error message from the CLI:

code:

Set failed for

port#

>

For example, here is the final command entry and the resulting error message in this scenario:

code:

C3(su)-

set maclock 00:12:34:AB:CD:EF ge.1.1 create

code:

Set failed for ge.1.1

code:

C3(su)-

>

And, here is the corresponding SNMP Error that may be sent to the NMS:

code:

Failed to set the static locked address [

Colon-delimited user MAC address

code:

] on

System IP address

code:

Port [

Ethernet port#

code:

]. MAC Locking may be disabled or unsupported for this port, the maximum number of allowed static MACs may have been exceeded, or the MAC Address may already be locked to this port or another port on the same device. ERROR: SNMP Error: Commit Failed (14). The attribute(s) contained in the failed SNMP packet were: etsysMACLockingStaticEntryRowStatus.2.0.38.185.216.176.223 (CreateAndGo)

Solution/Workaround
Functions as Designed (FAD).

The same MAC address cannot be statically MAC Locked on more than a single port per stack.

The product Configuration Guides '

code:

set maclock

' section, and the Release Notes '

code:

Known Restrictions and Limitations

' section, state:

code:

Static MAC locking a user on multiple ports is not supported.

topic SecureStack does not Permit a User to be Statically MacLocked to more than One Port in FAQs

SecureStack does not Permit a User to be Statically MacLocked to more than One Port