实验一下mac-address-table static的作用
----------------------------------------------------------------------------
Switch#show run
Building configuration...
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 2
switchport mode access
interface Vlan2
ip address 192.168.2.254 255.255.255.0
.....
end
-----------------------------------------------------------------------------
pc1:192.168.2.1/0000.0C72.1AD6
pc2:192.168.2.2/0001.630A.E8D9
-----------------------------------------------------------------------------
pc1接入interface FastEthernet0/2
pc2接入interface FastEthernet0/1
均可ping通
-----------------------------------------------------------------------------
Switch#show mac-address-table
          Mac Address Table
-------------------------------------------
Vlan    Mac Address       Type        Ports
----    -----------       --------    -----
   2    0000.0c72.1ad6    DYNAMIC     Fa0/2
   2    0001.630a.e8d9    DYNAMIC     Fa0/1
-----------------------------------------------------------------------------
增加配置
Switch(config)#mac-address-table static 0000.0c72.1ad6 vlan 2 interface FastEthernet0/1
Switch(config)#do show mac
          Mac Address Table
-------------------------------------------
Vlan    Mac Address       Type        Ports
----    -----------       --------    -----
   2    0000.0c72.1ad6    STATIC      Fa0/1
   2    0001.630a.e8d9    DYNAMIC     Fa0/1
---------------------------------------------------------------
此时
pc1:192.168.2.1/0000.0C72.1AD6接入interface FastEthernet0/2无法ping通192.168.2.254
pc2正常
--------------------------------------------------------------
进一步测试，增加配置
interface FastEthernet0/3
switchport access vlan 3
switchport mode access
interface Vlan3
ip address 192.168.3.254 255.255.255.0
--------------------------------------------------------------
pc1:192.168.3.1/0000.0C72.1AD6接入interface FastEthernet0/3
可以ping通192.168.3.254
Switch(config-if)#do show mac
          Mac Address Table
-------------------------------------------
Vlan    Mac Address       Type        Ports
----    -----------       --------    -----
   2    0000.0c72.1ad6    STATIC      Fa0/1
   2    0001.630a.e8d9    DYNAMIC     Fa0/1
   3    0000.0c72.1ad6    DYNAMIC     Fa0/3
---------------------------------------------------------------
结论：mac-address-table static 0000.0c72.1ad6 vlan 2 interface FastEthernet0/1
静态绑定mac地址0000.0c72.1ad6
当mac地址为0000.0c72.1ad6 的终端接入vlan 2时，必须接入FastEthernet0/1口
·接入其他加入vlan 2的接口，无法通信
·其他mac接入FastEthernet0/1不受影响
·0000.0c72.1ad6 接入其他vlan不受影响
·mac-address-table static 绑定的端口不能启用switchport port-security