HP VPN Firewall Appliances Network Management Command Reference
73
Default
The maximum number of MAC addresses that can be learned on a port varies with device models, and
frames received are forwarded when the upper limit is reached.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Default command level
2: System level
Parameters
count: Sets the maximum number of MAC addresses that can be learned on a port. When the argument
takes 0, the port is not allowed to learn MAC addresses. The value range varies with device models.
disable-forwarding: Disables the device from forwarding frames with unknown source MAC addresses
after the number of learned MAC addresses reaches the upper limit. Frames with the source MAC
addresses listed in the MAC address table are forwarded.
Usage guidelines
If the command is executed in interface view, the configuration takes effect on the interface.
The following matrix shows the mac-address max-mac-count command and hardware compatibility:
Hardware Com
p
atibilit
y
F1000-A-EI/F1000-S-EI Yes
F1000-E No
F5000 No
F5000-S/F5000-C Yes
VPN firewall modules No
20-Gbps VPN firewall modules No
The following matrix shows the value range for the count argument on different firewalls and firewall
modules:
Hardware Value ran
g
e
F1000-A-EI/F1000-S-EI 0 to 4096
F1000-E N/A
F5000 N/A
F5000-S/F5000-C 0 to 4096
VPN firewall modules N/A
20-Gbps VPN firewall modules N/A
Examples
# Set the maximum number of MAC addresses that can be learned on port GigabitEthernet 0/1 to 600.
After this upper limit is reached, frames received with unknown source MAC addresses on the port are
not forwarded.
<Sysname> system-view