R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

51
For security, add a destination blackhole MAC address entry for Host B’s MAC address, so that all
packets destined for Host B will be dropped.
Set the aging timer for dynamic MAC address entries to 500 seconds.
Configuration procedure
NOTE:
Before making the following configurations, check whether GigabitEthernet 0/1 operates in router mode.
If yes, change its operating mode to bridge mode (To do that, select Device Management > Interface from
the navigation tree, and then find and select GigabitEthernet 0/1 to configure it accordin
g
ly); in addition,
specify the security zone to which GigabitEthernet 0/1 belongs.
# Create a static MAC address entry.
• Select Network > MAC > MAC from the navigation tree to enter the MAC address table display
page, click Add, and make the following configurations on the page as shown in Figure 35.
Figure 35 Creating a static MAC address entry
• Enter MAC address 000f-e235-dc71.
• Select static in the Type list.
• Select 1 in the VLAN list.
• Select GigabitEthernet0/1 in the Port list.
• Click Apply.
# Create a blackhole MAC address entry.
• Click Add, and make the following configurations on the page as shown in Figure 36.