Configuring Processing Mode Of Ip Packets With Unknown Mac Address; Setting Aging Time Of Mac Address Forwarding Table - H3C SecPath F1800-A Operation Manual

Operation Manual - Getting Started
H3C SecPath F1800-A Firewall
Delete address entries.
3.3.3 Configuring Processing Mode of IP Packets with Unknown MAC
Address
In transparent mode, when receiving an IP packet with the unknown destination MAC
address; that is, the firewall is not aware of the outbound interface, the SecPath
F1800-A will process the IP packet in the following three modes.
Directly discards the IP packet.
Broadcasts the ARP request packet to other interfaces, which must belong to a
security zone, except the interface receiving the packet, and discards the IP
packet. After receiving the ARP response packet, the firewall will save the
relationship between the MAC address and the interface.
Forwards the IP packet to other interfaces, which must belong to a security zone,
except the interface receiving the packet. After receiving the response packet,
the firewall will save the MAC address and forward the subsequent packets
using the MAC address.
Do as follows in system view.
Table 3-4 Configuring processing mode of IP packets with unknown MAC addresses
Configure processing mode
of IP packets with unknown
MAC addresses.
Restore its default value.

3.3.4 Setting Aging Time of MAC Address Forwarding Table

Aging time of a dynamic address table is time to live of an address item before it is
deleted from the address table. The aging time is controlled by an aging timer. If the
timer times out, the address item will be deleted from the address table.
Do as follows in system view.
Action
undo mac-address mac-address vlan vlan-id
undo mac-address { dynamic | static | all | vlan
vlan-id }
Action
firewall unknown-mac unicast { drop | arp | flood }
firewall unknown-mac { broadcast | multicast }
{ drop | flood }
undo firewall unknown-mac { unicast | broadcast
| multicast }
Command
Command
1-80
Chapter 3 Working Mode