Extreme Networks ExtremeWare XOS 10.1, Руководство пользователя

Страница: 78 / 256

78 ExtremeWare XOS 10.1 Concepts Guide
Forwarding Database (FDB)
create fdbentry 00:A0:23:12:34:56 vlan net34 dynamic qosprofile qp2
This entry has the following characteristics:
• MAC address is 00:A0:23:12:34:56.
• VLAN name is net34.
• The entry will be learned dynamically.
• QoS profile qp2 will be applied as an egress QoS profile when the entry is learned.
Overriding 802.1p Priority
This example associates the QoS profile qp5 with the wildcard permanent FDB entry any-mac on VLAN
v110:
create fdbentry any-mac vlan v110 dynamic ingress-qosprofile qp5
Configuring the FDB Aging Time
You can configure the again time for dynamic FDB entries using the following command:
configure fdb agingtime <seconds>
If the aging time is set to zero, all aging entries in the database are defined as static, nonaging entries.
This means they will not age out, but non-permanent static entries can be deleted if the switch is reset.
Supported aging is between 15 and 1,000,000 seconds.
MAC-Based Security
MAC-based security allows you to control the way the FDB is learned and populated. By managing
entries in the FDB, you can block, assign priority (queues), and control packet flows on a per-address
basis.
MAC-based security allows you to limit the number of dynamically-learned MAC addresses allowed
per virtual port. You can also “lock” the FDB entries for a virtual port, so that the current entries will
not change, and no additional addresses can be learned on the port.
You can also prioritize or stop packet flows based on the source MAC address of the ingress VLAN or
the destination MAC address of the egress VLAN.
For detailed information about MAC-based security, see Chapter 9.
Displaying FDB Entries
To display FDB entries, use the following command:
show fdb {<mac_addr> | broadcast-mac | permanent | ports <portlist> | vlan
<vlan_name>}
where the following is true:
•
mac_address
—Displays the entry for a particular MAC address.