Adding A Static Mac Address Entry Manually; Mac Address Replication And Vlan Marking Configuration Example - H3C S3100 Series Operation Manual

Configuration Example

Adding a Static MAC Address Entry Manually

Network requirements
The server connects to the switch through Ethernet 1/0/2. To prevent the switch from broadcasting
packets destined for the server, it is required to add the MAC address of the server to the MAC address
table of the switch, which then forwards packets destined for the server through Ethernet 1/0/2.
The MAC address of the server is 000f-e20f-dc71.
Port Ethernet 1/0/2 belongs to VLAN 1.
Suppose the MAC address of a host is 000f-e235-abcd and belongs to VLAN 1. Because the host
once behaved suspiciously on the network, you can add a blackhole MAC address entry for the
MAC address to drop all packets destined for the host for security sake.
Configuration procedure
# Enter system view.
<Sysname> system-view
[Sysname]
# Add a MAC address, with the VLAN, ports, and states specified.
[Sysname] mac-address static 000f-e20f-dc71 interface Ethernet 1/0/2 vlan 1
# Add a black hole MAC address 000f-e235-abcd, with the VLAN and ports specified.
[Sysname] mac-address blackhole 000f-e235-abcd interface Ethernet 1/0/2 vlan 1
# Display information about the current MAC address table.
[Sysname] display mac-address interface Ethernet 1/0/2
MAC ADDR
000f-e20f-dc71
000f-e235-abcd
000f-e20f-a7d6
000f-e20f-b1fb
000f-e20f-f116
--- 4 mac address(es) found on port Ethernet1/0/2 ---

MAC Address Replication and VLAN Marking Configuration Example

Network requirements
As shown in Figure
Configure VLAN marking on Ethernet 1/0/1 of Switch A to replace the VLAN tag of packets sourced
from 192.168.1.0/24, which carry VLAN tag 3, with VLAN tag 4.
Configure VLAN marking on Ethernet 1/0/2 of Switch A to replace the VLAN tag of packet destined
for 192.168.1.0/24, which carry VLAN tag 4, with VLAN 3.
To reduce broadcast packets in the network, enable the MAC address replication feature.
VLAN ID STATE
1 Config static
1 Blackhole
1 Learned
1 Learned
1 Learned
1-8:
PORT INDEX
Ethernet1/0/2
Ethernet1/0/2
Ethernet1/0/2
Ethernet1/0/2
Ethernet1/0/2
1-12
AGING TIME(s)
NOAGED
NOAGED
AGING
AGING
AGING