ExtremeCloud IQ- Site Engine & Extreme Management Center

Expand all | Collapse all

How to block specified MAC on B5

  • 1.  How to block specified MAC on B5

    Posted 11-13-2013 10:34
    Hi, I have B5's working with NetSight 5. It is possible to block specified devices (by MAC) on ethernet port? Due to authentication quantity restrictions of devices (4) I must restrict some unnecessary devices on one port.

  • 2.  RE: How to block specified MAC on B5

    Posted 11-13-2013 13:41
    There are several solutions available. Our Network Access Control solution allows you to lock a mac to a specific port, preventing it from roaming elsewhere on the network. MAC Locking is available to lock specific MACs to a port and set the amount of MACs allowed to a specific number. Managing MAC locking is done via our Policy Manager application and a video is currently being produced to demonstrate the feature and it's capability. Our policy solution provides for a policy role to be applied to a port that will allow you to specify a MAC address to be blocked on that port. Below is a link to our youtube video which goes over a basic Policy Manager implementation: http://www.youtube.com/watch?v=2UkXuoMPbrU&list=PL4A31CD3CEF34A7B3 You may want to contact our GTAC or open an on-line case for further discussion of which solution would work best for you.

  • 3.  RE: How to block specified MAC on B5

    Posted 11-13-2013 20:28
    When Mac Locking is enabled at the port level there are two settings to be concerned about. The first is the number of dynamically locked Mac addresses. The default setting of 600 in Policy Manager allows up to 600 MAC addresses to come into the port as "First Arrival" addresses. These may be moved to static by a single button push or by manually adding them to the table. Once you've learned all the mac addresses that you want on a port and have pushed them to Static, you can set dynamic to zero. Once the zero value is applied, this will only allow the statically locked macs on the port. Any others that try to come in will not be learned and their traffic discarded. The other setting is the number of statically locked MAC addresses allowed on this device type and the range is controlled through the port properties screen. We expect our video to be up on youtube within 24 hours to demonstrate this functionality and showing the screens where these settings are configured. A MAC address should only show up once in the Locked Mac Address table. Please make sure that both your firmware and Netsight versions are up to date. If they are and the problem persists, we'll want to pursue this behavior further via a GTAC case.

  • 4.  RE: How to block specified MAC on B5

    Posted 11-15-2013 00:31
    As discussed, here's the link to the MAC locking video now up on YouTube;


  • 5.  RE: How to block specified MAC on B5

    Posted 11-15-2013 07:08
    My doubts stemmed from a misunderstanding of the NetSight Help.
    The feature name "LOCK" suggests that everything on the list is LOCKED, but it is exactly the opposite: listed MAC addresses are allowed and not listed are rejected.
    Thomas, thank you for your help.

  • 6.  RE: How to block specified MAC on B5

    Posted 01-21-2015 07:01
    hello the VIDEO it is not avalaible, I need to block an speficif MAC addres in a B3 a C3 Enterasys Swicht. Please can you re-upload de video or tell me the command to filter it ?


  • 7.  RE: How to block specified MAC on B5

    Posted 01-23-2015 21:13
    Apologies for the broken link.
    The video "
    How to Configure Mac Locking with Policy Manager
    " is now located at