Mac Address Table Configuration Example; Network Requirements; Configuration Procedure; Verifying The Configuration - H3C S7500X Series Configuration Manual

MAC address table configuration example

Network requirements

As shown in
•
Host A at MAC address 000f-e235-dc71 is connected to GigabitEthernet 1/0/1 of Device and
belongs to VLAN 1.
•
Host B at MAC address 000f-e235-abcd, which behaved suspiciously on the network, also
belongs to VLAN 1.
Configure the MAC address table as follows:
•
To prevent MAC address spoofing, add a static entry for Host A in the MAC address table of
Device.
•
To drop all frames destined for Host B, add a blackhole MAC address entry for Host B.
•
Set the aging timer to 500 seconds for dynamic MAC address entries.
Figure 5 Network diagram

Configuration procedure

# Add a static MAC address entry for MAC address 000f-e235-dc71 on GigabitEthernet 1/0/1 that
belongs to VLAN 1.
<Device> system-view
[Device] mac-address static 000f-e235-dc71 interface gigabitethernet 1/0/1 vlan 1
# Add a blackhole MAC address entry for MAC address 000f-e235-abcd that belongs to VLAN 1.
[Device] mac-address blackhole 000f-e235-abcd vlan 1
# Set the aging timer to 500 seconds for dynamic MAC address entries.
[Device] mac-address timer aging 500

Verifying the configuration

# Display the static MAC address entries for GigabitEthernet 1/0/1.
[Device] display mac-address static interface gigabitethernet 1/0/1
MAC Address
000f-e235-dc71
# Display the blackhole MAC address entries.
[Device] display mac-address blackhole
MAC Address
000f-e235-abcd
# Display the aging time of dynamic MAC address entries.
[Device] display mac-address aging-time
MAC address aging time: 500s.
Figure 5:
VLAN ID State
1 Static
VLAN ID State
1 Blackhole
Port/Nickname
GE1/0/1
Port/Nickname
N/A
15
Aging
N
Aging
N