HP A5830 Configuration Manual page 29

Layer 2 lan switching
Hide thumbs Also See for A5830:
Table of Contents

Advertisement

The MAC address of Host A is 000f-e235-dc71 and belongs to VLAN 1. It is connected to
GigabitEthernet 1/0/1 of the device. To prevent MAC address spoofing, add a static entry for the
host in the MAC address table of the device.
The MAC address of Host B is 000f-e235-abcd and belongs to VLAN 1. For security, because this
host once behaved suspiciously on the network, add a blackhole MAC address entry for the host
MAC address, so that all packets destined for the host are dropped.
Set the aging timer for dynamic MAC address entries to 500 seconds.
Figure 2 Network diagram for MAC address table configuration
Host A
000f-e235-dc71
Configuration procedure
# Add a static MAC address entry.
<Sysname> system-view
[Sysname] mac-address static 000f-e235-dc71 interface gigabitethernet 1/0/1 vlan 1
# Add a blackhole MAC address entry.
[Sysname] mac-address blackhole 000f-e235-abcd vlan 1
# Set the aging timer for dynamic MAC address entries to 500 seconds.
[Sysname] mac-address timer aging 500
# Display the MAC address entry for port GigabitEthernet 1/0/1.
[Sysname] display mac-address interface gigabitethernet 1/0/1
MAC ADDR
000f-e235-dc71
---
1 mac address(es) found
# Display information about the blackhole MAC address table.
[Sysname] display mac-address blackhole
MAC ADDR
000f-e235-abcd
---
1 mac address(es) found
# View the aging time of dynamic MAC address entries.
[Sysname] display mac-address aging-time
Mac address aging time: 500s
Device
GE1/0/1
GE1/0/2
VLAN 1
VLAN 1
VLAN ID
STATE
1
Config static
---
VLAN ID
STATE
1
Blackhole
---
Host B
000f-e235-abcd
PORT INDEX
GigabitEthernet 1/0/1
PORT INDEX
N/A
22
AGING TIME(s)
NOAGED
AGING TIME(s)
NOAGED

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents