Disabling Mac Address Learning On A Vlan; Configuring The Aging Timer For Dynamic Mac Address Entries - HP 3600 v2 series Configuration Manual

To do...
Add or modify a dynamic or
static MAC address entry
Add or modify a blackhole
MAC address entry
Adding or modifying a static or dynamic MAC address table entry on an interface
Follow these steps to add or modify a static or dynamic MAC address table entry in interface view:
To do...
Enter system view
Enter Layer 2 Ethernet
interface view or Layer 2
aggregate interface view
Add or modify a static or
dynamic MAC address entry

Disabling MAC address learning on a VLAN

Sometimes, you might need to disable MAC address learning to prevent the MAC address table from
being saturated, for example, when your device is being attacked by a large amount of packets with
different source MAC addresses.
You might disable MAC address learning on a per-VLAN basis.
Follow these steps to disable MAC address learning on a VLAN:
To do...
Enter system view
Enter VLAN view
Disable MAC address learning on
the VLAN
NOTE:
When MAC address learning is disabled, the learned MAC addresses remain valid until they age out.

Configuring the aging timer for dynamic MAC address entries

The MAC address table uses an aging timer for dynamic MAC address entries for security and efficient
use of table space. If a dynamic MAC address entry has failed to update before the aging timer expires,
the device deletes the entry. This aging mechanism ensures that the MAC address table can quickly
update to accommodate the latest network changes.
Set the aging timer appropriately. Too long an aging interval might cause the MAC address table to
retain outdated entries, exhaust the MAC address table resources, and fail to update its entries to
Use the command...
mac-address { dynamic | static }
mac-address interface interface-type
interface-number vlan vlan-id
mac-address blackhole mac-address vlan
vlan-id
Use the command...
system-view
interface interface-type
interface-number
mac-address { dynamic | static }
mac-address vlan vlan-id
Use the command...
system-view
vlan vlan-id
mac-address mac-learning disable
23
Remarks
Required
Use either command.
Make sure that you have created
the VLAN and assign the
interface to the VLAN.
Remarks
—
—
Required
Make sure that you have created the
VLAN and assign the interface to the
VLAN.
Remarks
—
—
Required
Enabled by default.