VLAN Commands 85Nortel WLAN—Security Switch 2300 Series Command Line Referenceclear security l2-restrictRemoves one or more MAC addresses from the list of destination MAC addresses to which clients in a VLAN areallowed to send traffic at Layer 2.Syntax clear security l2-restrict vlan vlan-id[permit-mac mac-addr [mac-addr] | all]Defaults If you do not specify a list of MAC addresses or all, all addresses are removed.Access Enabled.History Introduced in WSS Software Version 4.1.Usage If you clear all MAC addresses, Layer 2 forwarding is no longer restricted in the VLAN. Clientswithin the VLAN will be able to communicate directly.There can be a slight delay before functions such as pinging between clients become available again after Layer 2restrictions are lifted. Even though packets are passed immediately once Layer 2 restrictions are gone, it can take 10seconds or more for upper-layer protocols to update their ARP caches and regain their functionality.To clear the statistics counters without removing any MAC addresses, use the clear security l2-restrict counterscommand instead.Examples The following command removes MAC address aa:bb:cc:dd:ee:ff from the list of addresses towhich clients in VLAN abc_air are allowed to send traffic at Layer 2:WSS# clear security l2-restrict vlan abc_air permit-mac aa:bb:cc:dd:ee:ffsuccess: change accepted.See Also• clear security l2-restrict counters on page 75• set security l2-restrict on page 78• show security l2-restrict on page 87clear security l2-restrict countersClear statistics counters for Layer 2 forwarding restriction.Syntax clear security l2-restrict counters [vlan vlan-id | all]vlan-id VLAN name or number.permit-mac mac-addr[mac-addr] List of MAC addresses. WSS Software no longer allows clients in theVLAN to send traffic to the MAC addresses at Layer 2.all Removes all MAC addresses from the list.vlan-id VLAN name or number.all Clears Layer 2 forwarding restriction counters for all VLANs.
