Configure the MAC address table as follows:
•
To prevent MAC address spoofing, add a static entry for Host A in the MAC address table of
Device.
To drop all frames destined for Host B, add a blackhole MAC address entry for the host.
•
Set the aging timer to 500 seconds for dynamic MAC address entries.
•
Configuration procedure
# Add a static MAC address entry for MAC address 000f-e235-dc71 on Ten-GigabitEthernet 1/0/1 that
belongs to VLAN 1.
<Device> system-view
[Device] mac-address static 000f-e235-dc71 interface ten-gigabitethernet 1/0/1 vlan 1
# Add a blackhole MAC address entry for MAC address 000f-e235-abcd that belongs to VLAN 1.
[Device] mac-address blackhole 000f-e235-abcd vlan 1
# Set the aging timer to 500 seconds for dynamic MAC address entries.
[Device] mac-address timer aging 500
Verifying the configuration
# Display the static MAC address entries for interface Ten-GigabitEthernet 1/0/1.
[Device] display mac-address static interface ten-gigabitethernet 1/0/1
MAC Address
000f-e235-dc71
# Display the blackhole MAC address entries.
[Device] display mac-address blackhole
MAC Address
000f-e235-abcd
# Display the aging time of dynamic MAC address entries.
[Device] display mac-address aging-time
MAC address aging time: 500s.
VLAN ID
State
1
Static
VLAN ID
State
1
Blackhole
Port/NickName
XGE1/0/1
Port/NickName
N/A
32
Aging
N
Aging
N