Switch 7700 Command reference Guide, v2.0

MAC Address Table Management Commands 433
mac-address
mac-learning disable
Syntax
mac-address mac-learning disable
undo mac-address mac-learning disable
View
System view, Ethernet port view
Parameter
disable: Disable the address learning.
Description
Using the mac-address mac-learning disable command, you can disable the
MAC address learning function of the switch or one of its port. Using the
undo
mac-address mac-learning disable
command, you can enable the MAC
address learning function.
By default, Address learning is enabled.
To disable the address learning feature can guarantee the security of the Ethernet
switch, so that the attackers cannot attack and exhaust the switch with the frames
from different addresses. However, after the function is disable, the switch cannot
learn any new addresses or update the MAC address table timely. Normally, the
user can disable the function on some ports. Disabling address learning will not
affect flooding the unicast packets whose destination cannot be found, and
therefore the broadcast suppression function is also necessary in this case.
For the related commands, see display mac-address learning.
Example
Disables the address learning function of all the ports.
[SW7700]mac-address mac-learning disable
mac-address
max-mac-count
Syntax
mac-address max-mac-count count
undo mac-address max-mac-count
View
Ethernet port view
Parameter
count: Enter to specify how many MAC addresses a port can learn. This can be in
the range 0 to 32768. 0 means that the port is not allowed to learn MAC
addresses.
Description
Use the mac-address max-mac-count command to configure the maximum
number of MAC addresses that can be learned by a specified Ethernet port. The
port stops learning MAC addresses when the specified limit is reached.