Tag :: MAC

Security MAC ACLs can be used to permit and/or deny ethernet packets on the egress port by matching on the following

One of the primary functions of a switch is to forward packets to the correct next hop. This necessitates knowing the unique MAC addresses of all connected hosts and switches to a network interface. In dynamic environments like campus networks, the hosts often come and go, which means the number of connected hosts that the switch knows about expands continuously. Therefore, it becomes necessary to have a mechanism for the switch to eventually discard information about MAC addresses that are no longer active in the network. 

This feature adds three new SNMP traps for MAC move, learn, and age events: aristaMacMove, aristaMacLearn, and

The VxLAN MAC drop feature directs all VxLAN MAC addresses to a drop destination, causing the switch to drop all egress VxLAN bridging traffic, effectively disabling VxLAN bridging on the switch. VxLAN routing is unaffected. In some VxLAN routing-only deployments, bridging tunnels are unused yet still consume hardware resources. This feature frees the tunnel hardware resources used for VxLAN bridging, which can then be allocated for VxLAN routing. This in turn allows the switch to support more remote VTEPs. Typical use cases include centralized routing gateways or spines in EVPN-VxLAN fabrics, and VESPA (Virtual Ethernet Segment with Proxy ARP) gateways in wireless campus deployments.