1-3
Figure 1-1
Forward frames using the MAC address table
Configuring a MAC Address Table
The MAC address table configuration tasks include:
z
Configuring MAC Address Table Entries
z
Configuring the Aging Timer for Dynamic MAC Address Entries
z
Configuring the MAC Learning Limit
These configuration tasks are all optional and order independent. You can perform them as needed in
any order.
Configuring MAC Address Table Entries
Usually, a device can populate its MAC address table automatically by learning the source MAC
addresses of received frames.
To improve port security, you can manually add MAC address entries to the MAC address table to bind
ports with MAC addresses, thus fending off MAC address spoofing attacks.
In addition, you can configure blackhole MAC address entries to filter out packets with certain source or
destination MAC addresses.
Follow these steps to add, modify, or remove entries in the MAC address table globally:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Add/modify a MAC address
entry
mac-address
{
dynamic
|
static
}
mac
-
address interface
interface
-
type interface
-
number
vlan
vlan
-
id
mac-address blackhole
mac
-
address vlan
vlan
-
id
Required
