H3C S6850 Series, Руководство по настройке

Страница: 20 / 394

14
Task Command
Display the system or interface MAC
address learning state.
display mac-address mac-learning
[ interface interface
-
type interface
-
number ]
Display the MAC address move
records.
display mac-address mac-move [ slot
slot-number ]
Display MAC address statistics.
display mac-address statistics
MAC address table configuration examples
Example: Configuring the MAC address table
Network configuration
As shown in Figure 5 :
•
Host A at MAC address 000f-e235-dc71 is connected to Twenty-FiveGigE 1/0/1 of Device and
belongs to VLAN 1.
•
Host B at MAC address 000f-e235-abcd, which behaved suspiciously on the network, also
belongs to VLAN 1.
Configure the MAC address table as follows:
•
To prevent MAC address spoofing, add a static entry for Host A in the MAC address table of
Device.
•
To drop all frames destined for Host B, add a blackhole MAC address entry for Host B.
•
Set the aging timer to 500 seconds for dynamic MAC address entries.
Figure 5 Network diagram
Procedure
# Add a static MAC address entry for MAC address 000f-e235-dc71 on Twenty-FiveGigE 1/0/1 that
belongs to VLAN 1.
<Device> system-view
[Device] mac-address static 000f-e235-dc71 interface twenty-fivegige 1/0/1 vlan 1
# Add a blackhole MAC address entry for MAC address 000f-e235-abcd that belongs to VLAN 1.
[Device] mac-address blackhole 000f-e235-abcd vlan 1
# Set the aging timer to 500 seconds for dynamic MAC address entries.
[Device] mac-address timer aging 500
Verifying the configuration
# Display the static MAC address entries for Twenty-FiveGigE 1/0/1.
[Device] display mac-address static interface twenty-fivegige 1/0/1
MAC Address VLAN ID State Port/Nickname Aging
000f-e235-dc71 1 Static WGE1/0/1 N
# Display the blackhole MAC address entries.
Device
WGE1/0/1
Host A
Host B
000f-e235-dc71
000f-e235-abcd