Disable forwarding of a specific MAC address on a cisco Switch

Disable forwarding of a specific MAC address on a cisco Switch
It is really annoying to see other illegal DHCP in the LAN. In addition to the dhcp snooping method, you can also directly disable the mac address! The MAC address of machine A is 00-01-02-03-04-05, which is connected to port F0/3 of Switch B, port F0/3 is in VLAN3. Currently, forwarding of A is blocked on port B. You can set the following according to different vswitches: CatOS (v5.5 or above ): set cam permanent 00-01-02-03-04-050/43 clear cam 00-01-02-03-04-05 IOS: 6500/4500/4000/3750/3560/3550: mac address-table static 0001.0203.0405 vlan 3 drop 3500XL/2900XL: mac address-table secure 0001.0203.0405 fastethernet 0/4 vlan 3 2950 (WS-C2950): mac address-table static 0001.0203.0405 vla N 3 interface fastethernet0/4 In addition, you can also bind the MAC address of machine A to the direct port of machine A to achieve this purpose, the method is as follows: 1. show mac-address-table and find the port and VLAN of the MAC. For example, if FA0/3 is found and VALN is 1, MAC: 0001.0203.00XX 2,> enable # configure terminal (config) # mac address-table static 0001.0203.00XX vlan 1 interface fastEthernet 0/4 --- forcibly binds 0001.0203.00XX from VALN1 to fastEthernet 0/4, in this way, you cannot run the 0001.0203.00XX address on fastEthernet 0/3! (Config) # exit becomes!