Skip to content
Any configuration changes made locally on the switch won't be synchronized with Sophos Central. We recommend making changes from the Sophos Central control panel instead.

MAC address table

The MAC address table shows the MAC address details of devices connected to Sophos Switch, including the port and VLAN to which they're connected.

You can also filter and block MAC addresses to prevent them from sending traffic to Sophos Switch on certain ports and VLANs.

Static MAC address

Static MAC addresses are MAC addresses you enter manually into the MAC address table. Static MAC addresses are kept in the MAC address table until you manually remove them.

Static MAC address tab.

To add a static MAC address, click Add, enter the MAC address, Port, and VID, then click Apply.

To edit a static MAC address entry, click Edit.

To delete a static MAC address entry, click Delete.

Dynamic MAC address

Dynamic MAC addresses are MAC addresses that Sophos Switch has learned from the src mac add field of Address Resolution Protocol (ARP) packets received by Sophos Switch.

Dynamic MAC address tab.

To add a dynamic MAC address to the static MAC address table, click Move to static.

To add a dynamic MAC address to the MAC filter table, click Move to filter.

MAC aging time

The MAC aging time is the time, in seconds, a dynamic MAC address remains valid. When the MAC aging time reaches the limit, Sophos Switch checks if the MAC address is still connected and, if not, removes the disconnected MAC addresses from the MAC address table.

MAC aging time tab.

To set the MAC aging time, enter a value from 10 to 630 and click Apply.

MAC filters

You can allow MAC addresses to connect to specified VLANs while blocking them from others on the MAC filters tab.

MAC filters tab.

To add a MAC address to the MAC filters list, click Add, enter the VID and the MAC address, and click Apply.

To remove a MAC address from the MAC filters list, select the MAC address and click Delete.

MAC blocking

The MAC blocking tab lets you block all traffic from specific MAC addresses on all VLANs. When you add a dynamic MAC address to the MAC blocking list, it's deleted from the Dynamic MAC address table and won't be added back.

You can turn MAC blocking on or off from the Global settings tab.

Global settings tab.

The Blocking list tab shows all blocked MAC addresses and the VLANs on which they're blocked.

Blocking list tab.

To block a MAC address, click Add. Enter the MAC address and click Apply.

To remove a MAC address from the blocked list, select the MAC address and click Delete.