Figure
1-1 Network diagram for MAC address table
management
Server is connected to Switch through port GigabitEthernet
1/0/2. Configure a static MAC address entry of Server on Switch, so that Switch
always unicasts rather than broadcasts packets destined for Server through GigabitEthernet
1/0/2. Port GigabitEthernet 1/0/10 is connected with a network management
server (NMS). For network management security, configure GigabitEthernet 1/0/10
to permit the access of this NMS only.
l
The MAC address of Server is 000f-e20f-dc71
l
Port GigabitEthernet 1/0/2, GigabitEthernet
1/0/5, and GigabitEthernet 1/0/10 belong to VLAN 10
l
The MAC address of NMS is 0014-222c-aa69
l
Set the aging time of MAC address entries on
Switch to 500 seconds
|
Product series
|
Software version
|
Hardware version
|
|
S3610 Series Ethernet Switches
|
Release 5301
|
All versions
|
|
S5510 Series Ethernet Switches
|
Release 5301
|
All versions
|
|
S5500-SI Series Ethernet Switches
|
Release 1207
|
All versions except S5500-20TP-SI
|
|
Release 1301
|
S5500-20TP-SI
|
|
S5500-EI Series Ethernet Switches
|
Release 2102
|
All versions
|
|
S7500E Series Ethernet Switches
|
Release 6100
|
All versions
|
# Create VLAN 10,
and add ports GigabitEthernet 1/0/2, GigabitEthernet 1/0/5, and GigabitEthernet
1/0/10 to VLAN 10.
<Sysname>
system-view
[Sysname]
vlan 10
[Sysname-vlan10] port GigabitEthernet1/0/2
GigabitEthernet1/0/5 GigabitEthernet1/0/10
# Add a static MAC address entry.
[Sysname]
mac-address static 000f-e20f-dc71 interface GigabitEthernet 1/0/2 vlan 10
# Set the aging time of dynamic MAC address
entries on Switch to 500 seconds.
[Sysname]
mac-address timer aging 500
# Display the configuration of MAC address
table in system view.
[Sysname]
display mac-address interface GigabitEthernet 1/0/2
MAC ADDR
VLAN ID STATE PORT INDEX AGING TIME(s)
000f-e20f-dc71
1 Config static GigabitEthernet1/0/2 NOAGED
00e0-fc17-a7d6
1 Learned GigabitEthernet1/0/2 AGING
00e0-fc5e-b1fb
1 Learned GigabitEthernet1/0/2 AGING
00e0-fc55-f116
1 Learned GigabitEthernet1/0/2 AGING
--- 4 mac
address(es) found on port GigabitEthernet1/0/2 ---
# Disable GigabitEthernet 1/0/10 from
learning MAC addresses dynamically, and add a static MAC address entry, so that
port GigabitEthernet 1/0/10 can forward only the packets sent by NMS, and other
hosts cannot communicate through this port.
[Sysname] interface
GigabitEthernet 1/0/10
[Sysname-GigabitEthernet1/0/10]
port access vlan 10
[Sysname-GigabitEthernet1/0/10]
mac-address max-mac-count 0
[Sysname-GigabitEthernet1/0/10]
mac-address static 0014-222c-aa69 vlan 10
#
mac-address
timer aging 500
#
vlan 10
#
interface
GigabitEthernet1/0/2
port access
vlan 10
mac-address static
000f-e20f-dc71 vlan 10
#
interface
GigabitEthernet1/0/5
port access
vlan 10
#
interface
GigabitEthernet1/0/10
port access
vlan 10
mac-address
max-mac-count 0
mac-address
static 0014-222c-aa69 vlan 10
Do not configure a static and dynamic MAC
address entry on an aggregation port.
