Example For Configuring The Limitation On Mac Address Learning Based On Vlan - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Ethernet
0002-0002-0002 2
-------------------------------------------------------------------------------
Total matching items displayed = 3
# Run the display mac-address aging-time command in any view. You can check whether the
aging time of dynamic entries is set successfully.
[Quidway] display mac-address aging-time
Aging time: 500 seconds
----End
Configuration Files
The following lists the configuration file of the S9300.
#
sysname Quidway
#
vlan batch 2
#
mac-address aging-time 500
#
interface GigabitEthernet1/0/1
port hybrid pvid vlan 2
port hybrid untagged vlan 2
port vlan-mapping outside-vlan 4 map-vlan 2
mac-address static 0002-0002-0002 GigabitEthernet1/0/1 vlan 2
mac-address static 0003-0003-0003 GigabitEthernet1/0/1 vlan 2
#
interface GigabitEthernet1/0/2
port hybrid pvid vlan 2
port hybrid untagged vlan 2
mac-address static 0004-0004-0004 GigabitEthernet1/0/2 vlan 2
#
return
6.6.2 Example for Configuring the Limitation on MAC Address
Learning Based on VLAN
Networking Requirements
As shown in
User network 2 is connected to GE 2/0/1 on the S9300 through another LSW. GE 1/0/1 and GE
2/0/1 belong to VLAN 2. To prevent MAC address attacks and control the number of access
users, you need to limit the MAC address learning in VLAN 2.
Issue 03 (2009-08-20)
-
Figure 6-2, user network 1 is connected to GE 1/0/1 on the S9300 through an LSW.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 MAC Address Table Configuration
- GE1/0/1 static -
6-13