R2511-HP MSR Router Series Layer 2 - LAN Switching Configuration Guide(V5)

MAC address table configuration example

Network requirements

As shown in Figure 1:

• Host A at MAC address 000f-e235-dc71 belongs to VLAN 1.

• Host B at MAC address 000f-e235-abcd, which once behaved suspiciously on the network, also

belongs to VLAN 1.

Configure the MAC address table as follows:

• To prevent MAC address spoofing, add a static entry for Host A in the MAC address table of the

router.

• Add a blackhole MAC address entry for Host B, so that all frames destined for the host are

dropped.

• Set the aging timer for dynamic MAC address entries to 500 seconds.

Figure 1 Network diagram

Configuration procedure

# Add a static MAC address entry.

<Router> system-view

[Router] mac-address static 000f-e235-dc71 interface ethernet 1/1 vlan 1

# Add a destination blackhole MAC address entry.

[Router] mac-address blackhole 000f-e235-abcd vlan 1

# Set the aging timer for dynamic MAC address entries to 500 seconds.

[Router] mac-address timer aging 500

Verifying the configuration

# Display the MAC address entry for port Ethernet 1/1.

[Router] display mac-address interface ethernet 1/1

MAC ADDR VLAN ID STATE PORT INDEX AGING TIME(s)

000f-e235-dc71 1 Config static Ethernet 1/1 NOAGED