HP MSR2000/3000/4000 Router Series Layer 2 - LAN Switching Command Reference

Table Of Contents
5
mac-address (system view)
Use mac-address to add or modify a MAC address entry.
Use undo mac-address to delete one or all MAC address entries.
Syntax
mac-address { dynamic | static } mac-address interface interface-type interface-number vlan vlan-id
mac-address blackhole mac-address vlan vlan-id
undo mac-address [ [ dynamic | static ] mac-address interface interface-type interface-number vlan
vlan-id ]
undo mac-address [ blackhole | dynamic | static ] [ mac-address ] vlan vlan-id
undo mac-address [ dynamic | static ] interface interface-type interface-number
Default
The system is not configured with any MAC address entry.
Views
System view
Predefined user roles
network-admin
Parameters
dynamic: Specifies dynamic MAC address entries.
static: Specifies static MAC address entries.
blackhole: Specifies blackhole MAC address entries. The packets whose destination MAC addresses
match blackhole MAC address entries are dropped.
mac-address: Specifies a MAC address in the format of H-H-H, excluding multicast and all-zero MAC
addresses. When entering a MAC address, you can omit the leading zeros in each H section. For
example, enter f-e2-1 for 000f-00e2-0001.
vlan vlan-id: Specifies an existing VLAN to which the interface belongs. The value range for the vlan-id
argument is 1 to 4094.
interface interface-type interface-number: Specifies an outgoing interface by its type and number.
interface interface-list: Specifies Layer 2 Ethernet interfaces in the format of { interface-type
interface-number [ to interface-type interface-number ] } &<1-n>. &<1-n> specifies that you can configure
up to n interfaces or interface ranges.
Usage guidelines
Generally, the device automatically builds the MAC address table by learning the source MAC
addresses of incoming frames on each interface. To improve interface security, you can manually add the
specific MAC address entries to the MAC address table and bind the user device to the interface.
Because manually configured entries have higher priority than dynamically learned entries, using
manually configured entries prevents hackers from using forged MAC addresses to steal data.
To drop the packets with the specified destination MAC addresses, you can configure blackhole MAC
address entries.