31
Task Command
MAC address move records.
(In IRF mode.) Display the MAC
address move records.
display mac-address mac-move
[
chassis
chassis-number
slot
slot-number
]
MAC address table configuration example
Network requirements
As shown in
:
•
Host A at MAC address 000f-e235-dc71 is connected to HundredGigE 1/0/1 of Device and
belongs to VLAN 1.
•
Host B at MAC address 000f-e235-abcd, which behaved suspiciously on the network, also
belongs to VLAN 1.
Configure the MAC address table as follows:
•
To prevent MAC address spoofing, add a static entry for Host A in the MAC address table of
Device.
•
To drop all frames destined for Host B, add a blackhole MAC address entry for Host B.
•
Set the aging timer to 500 seconds for dynamic MAC address entries.
Figure 7 Network diagram
Configuration procedure
# Add a static MAC address entry for MAC address 000f-e235-dc71 on HundredGigE 1/0/1 that
belongs to VLAN 1.
<Device> system-view
[Device] mac-address static 000f-e235-dc71 interface hundredgige 1/0/1 vlan 1
# Add a blackhole MAC address entry for MAC address 000f-e235-abcd that belongs to VLAN 1.
[Device] mac-address blackhole 000f-e235-abcd vlan 1
# Set the aging timer to 500 seconds for dynamic MAC address entries.
[Device] mac-address timer aging 500
Verifying the configuration
# Display the static MAC address entries for HundredGigE 1/0/1.
[Device] display mac-address static interface hundredgige 1/0/1
MAC Address VLAN ID State Port/NickName Aging
000f-e235-dc71 1 Static HGE1/0/1 N
# Display the blackhole MAC address entries.
[Device] display mac-address blackhole