R21xx-HP FlexFabric 11900 Layer 2 LAN Switching Configuration Guide

23
Disabling MAC address learning
MAC address learning is enabled by default. To prevent the MAC address table from being saturated
when the device is experiencing attacks, disable MAC address learning. For example, you can disable
MAC address learning to prevent the device from being attacked by a large amount of frames with
different source MAC addresses.
Disabling global MAC address learning
Step Command Remarks
1. Enter system view.
system-view N/A
2. Disable global MAC address
learning.
undo mac-address mac-learning
enable
By default, global MAC address
learning is enabled.
Disabling global MAC address learning disables the learning function on all interfaces.
The global MAC address learning configuration does not take effect in a TRILL network, in a VPLS VSI, or
for an S-channel in an EVB. For information about the TRILL network, see TRILL Configuration Guide. For
information about VSI, see MPLS Configuration Guide. For information about S-channel and EVB, see
EVB Configuration Guide.
When MAC address learning is disabled, the learned MAC addresses remain valid until they age out.
Disabling MAC address learning on interfaces
With global MAC address learning enabled, you may disable MAC address learning on a single
interface as needed.
To disable MAC address learning on an interface:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter interface view.
• Enter Layer 2 Ethernet interface
view:
interface interface-type
interface-number
• Enter Layer 2 aggregate
interface view:
interface bridge-aggregation
interface-number
• Enter S-channel interface view:
interface s-channel
interface-number.channel-id
N/A
3. Disable MAC address
learning on the interface.
undo mac-address mac-learning
enable
By default, MAC address learning
on the interface is enabled.
Disabling MAC address learning on a VLAN
With global MAC address learning enabled, you can also disable MAC address learning on a
per-VLAN basis.
To disable MAC address learning on a VLAN: