Configuring A Blackhole Mac Address Entry - Huawei Quidway S7700 Configuration Manual - Ethernet

Quidway S7700 Smart Routing Switch
Configuration Guide - Ethernet
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
mac-address static mac-address interface-type interface-number { vlan vlan-id1 |
[ vlanif vlan-id2 ] vsi vsi-name }
A static MAC address entry is configured.
----End
Checking the Configuration
Run the display mac-address static [ vlan vlan-id | interface-type interface-number ]
[ verbose ] command to view static MAC address entries.

7.4 Configuring a Blackhole MAC Address Entry

You can configure a blackhole MAC address entry so that the S7700 can discard packets with
the specified source or destination MAC address.
Applicable Environment
To protect user devices or network devices from MAC address attacks, you can configure
untrusted MAC addresses as blackhole MAC addresses. Packets with source or destination MAC
addresses matching the blackhole MAC address entries are discarded.
Pre-configuration Tasks
None.
Data Preparation
To configure a blackhole MAC address entry, you need the following data.
No.
1
Procedure
Step 1 Run:
system-view
Issue 01 (2011-07-15)
NOTE
Static MAC address entries take precedence over dynamic MAC address entries.
Data
Destination or source MAC address, name of the VSI and ID of VLAN to which the
outbound interface belongs to
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 MAC Address Table Configuration
*
348