4000 Router Series Layer 2 - LAN Switching Configuration Guide

MAC address table configuration example

Network requirements

Host A (000f-e235-dc71) is connected to interface Ethernet 2/1 of Router and belongs to VLAN 1. To

prevent MAC address spoofing, add a static entry for Host A in the MAC address table of Router.

Host B (000f-e235-abcd), which once behaved suspiciously on the network, also belongs to VLAN 1. For

security, add a blackhole MAC address entry for Host B, so that all frames destined for the host will be

dropped.

Set the aging timer for dynamic MAC address entries to 500 seconds.

Configuration procedure

# Add a static MAC address entry for MAC address 000f-e235-dc71 on Ethernet 2/1 that belongs to

VLAN 1.

<Router> system-view

[Router] mac-address static 000f-e235-dc71 interface ethernet 2/1 vlan 1

# Add a blackhole MAC address entry for MAC address 000f-e235-abcd that belongs to VLAN 1.

[Router] mac-address blackhole 000f-e235-abcd vlan 1

# Set the aging timer for dynamic MAC address entries to 500 seconds.

[Router] mac-address timer aging 500

Verifying the configuration

# Display the static MAC address entry for interface Ethernet 2/1.

[Router] display mac-address static interface ethernet 2/1

MAC Address VLAN ID State Port Aging

000f-e235-dc71 1 Static Eth2/1 N

# Display information about the blackhole MAC address entries.

[Router] display mac-address blackhole

MAC Address VLAN ID State Port Aging

000f-e235-abcd 1 Blackhole N/A N

# Display the aging time of dynamic MAC address entries.

[Router] display mac-address aging-time

MAC address aging time: 500s.