R3204P16-HP Load Balancing Module Network Management Configuration Guide-6PW101

22
You can manually add MAC address entries to the MAC address table of the device to bind specific user
devices to the port. Because manually configured entries have higher priority than dynamically learned
ones, this prevents hackers from stealing data using forged MAC addresses.
Types of MAC address table entries
A MAC address table may contain the following types of entries:
• Static entries, which are manually added and never age out.
• Dynamic entries, which can be manually configured or dynamically learned and may age out.
• Blackhole entries, which are manually configured and never age out. Blackhole entries are
configured for filtering out frames with specific source or destination MAC addresses. For example,
to block all packets destined for a specific user for security concerns, you can configure the MAC
address of this user as a blackhole destination MAC address entry.
NOTE:
A
static or blackhole MAC address entry can overwrite a dynamic MAC address entry, but not vice versa.
MAC address table-based frame forwarding
When forwarding a frame, the device adopts the following forwarding modes based on the MAC
address table:
• Unicast mode: If an entry is available for the destination MAC address, the device forwards the
frame out the outgoing interface indicated by the MAC address table entry.
• Broadcast mode: If the device receives a frame with an all-ones destination address, or no entry is
available for the destination MAC address, the device broadcasts the frame to all the interfaces
except the receiving interface.
Figure 8 MAC address table of the device
Port 1 Port 2
MAC address Port
MAC A 1
MAC B 1
MAC C 2
MAC D 2
MAC A
MAC B
MAC C
MAC D