08-02-2008 12:37 AM - edited 03-06-2019 12:34 AM
hi,
i have come to know that 2960-48-TTL supports up 8000 mac addresses. i would like to know how many mac address a single port can support.
i have 2960 connected to linksys and further linksys connects to another linksys switch. My network is chocking. Any reason. i feel it may be due to mac-address.
Thanks
Solved! Go to Solution.
08-02-2008 01:44 PM
Was not going to post on this one but the above post is misleading. Port security does indeed limit the number of addresses but this feature is not enabled by default.
This is a complex question because it works slightly differently on different switches and can have limits per vlan.
Since it appears you are running a simple single vlan you can assume that all 8000 are usable.
The key here is that the mac table is a central table it does not reside on a buffer or something on a port. It is a lookup table for the switch to find the port when it knows a mac not the other way around. So if the table has 8000 entries in theory I guess all 8000 could point to the same port.
Even in a huge network you will never see that many mac addresses. There are attacks that attempt to flood the mac table but there are options on the switch mitigate this. It is very unlikely you are exceeding the mac table. You could attempt to show the mac table and it will be very obvious if you have a issue.
More than likely you have a spanning tree issue. If possible turn spanning tree on the small switches. If they are the very cheap non managed ones they do not support spanning tree. All it takes to disable a network that does not have spanning tree on is to plug 2 ports together.
It will be very hard if the only managed switch you have is the 2960. You could run wireshark and span "monitor" the uplink to your other switches. This would allow you to see the traffic.
08-02-2008 05:24 AM
By default, only one mac address per interface, and shuts down violation
-> change using switchport port-security maximum [1-132]
Hope this helps, Please rate if so.
Regards,
Justin
08-02-2008 01:44 PM
Was not going to post on this one but the above post is misleading. Port security does indeed limit the number of addresses but this feature is not enabled by default.
This is a complex question because it works slightly differently on different switches and can have limits per vlan.
Since it appears you are running a simple single vlan you can assume that all 8000 are usable.
The key here is that the mac table is a central table it does not reside on a buffer or something on a port. It is a lookup table for the switch to find the port when it knows a mac not the other way around. So if the table has 8000 entries in theory I guess all 8000 could point to the same port.
Even in a huge network you will never see that many mac addresses. There are attacks that attempt to flood the mac table but there are options on the switch mitigate this. It is very unlikely you are exceeding the mac table. You could attempt to show the mac table and it will be very obvious if you have a issue.
More than likely you have a spanning tree issue. If possible turn spanning tree on the small switches. If they are the very cheap non managed ones they do not support spanning tree. All it takes to disable a network that does not have spanning tree on is to plug 2 ports together.
It will be very hard if the only managed switch you have is the 2960. You could run wireshark and span "monitor" the uplink to your other switches. This would allow you to see the traffic.
08-04-2008 03:43 AM
8,000 as per page 130 of this excellent attached document.
HTH
Sam
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide