- Table of Contents
-
- H3C Low-End Ethernet Switches Configuration Guide(V1.01)
- 01-Login Configuration Guide
- 02-VLAN Configuration Guide
- 03-IP Address Configuration Guide
- 04-Voice VLAN Configuration Guide
- 05-GVRP Configuration Guide
- 06-Ethernet Interface Basic Configuration Guide
- 07-Link Aggregation Configuration Guide
- 08-Port Isolation Configuration Guide
- 09-Port Security Configuration Guide
- 10-Port Binding Configuration Guide
- 11-MAC Address Table Management Configuration Guide
- 12-DLDP Configuration Guide
- 13-Auto Detect Configuration Guide
- 14-MSTP Configuration Guide
- 15-Routing Configuration Guide
- 16-Multicast Configuration Guide
- 17-802.1x Configuration Guide
- 18-AAA Configuration Guide
- 19-MAC Authentication Configuration Guide
- 20-VRRP Configuration Guide
- 21-ARP Configuration Guide
- 22-DHCP Configuration Guide
- 23-ACL Configuration Guide
- 24-QoS-QoS Profile Configuration Guide
- 25-Web Cache Redirection Configuration Guide
- 26-Mirroring Configuration Guide
- 27-IRF Configuration Guide
- 28-Cluster Configuration Guide
- 29-PoE-PoE Profile Configuration Guide
- 30-UDP Helper Configuration Guide
- 31-SNMP-RMON Configuration Guide
- 32-NTP Configuration Guide
- 33-SSH Configuration Guide
- 34-FTP and TFTP Configuration Guide
- 35-Information Center Configuration Guide
- 36-VLAN-VPN Configuration Guide
- 37-HWPing Configuration Guide
- 38-DNS Configuration Guide
- 39-Access Management Configuration Guide
- 40-Web Authentication Configuration Guide
- 41-IPv6 Management Configuration Guide
- 42-Smart link - Monitor Link Configuration Guide
- 43-VLAN Mapping Configuration Guide
- Related Documents
-
Title | Size | Download |
---|---|---|
11-MAC Address Table Management Configuration Guide | 48.01 KB |
MAC Address Table Management
The S3600 series provide the MAC address table management function. Through configuration commands, you can add/modify/remove a MAC address, set the aging time for dynamic MAC addresses, and set the maximum number of MAC addresses an Ethernet port can learn.
Network Diagram
Figure 1-1 Network diagram for MAC address table management configuration
Networking and Configuration Requirements
Server is connected to Switch through port Ethernet 1/0/2. Configure a static MAC address containing the Server MAC address on Switch, so that Switch can unicast rather than broadcast packets destined for Server through Ethernet 1/0/2. Port Ethernet 1/0/10 is connected with a network management server (NMS). For network management security, configure Ethernet 1/0/10 to permit the access of this NMS only.
l The Server MAC address is 000f-e20f-dc71.
l Port Ethernet 1/0/2 belongs to VLAN 10.
l The NMS MAC address is 0014-222c-aa69.
Applicable Product Matrix
Product series |
Software version |
Hardware version |
S5600 series |
Release 1510, Release1602 |
All versions |
S5100-SI/EI series |
Release 2200, Release2201 |
All versions |
S3600-SI/EI series |
Release 1510, Release1602 |
All versions |
S3100-EI series |
Release 2104, Release 2107 |
All versions |
S3100-C-SI series S3100-T-SI series |
Release 0011, Release 2102, Release 2107 |
All versions |
S3100-52P |
Release 1500, Release 1602 |
S3100-52P |
Configuration Procedure
# Add ports Ethernet 1/0/5 and Ethernet 1/0/2 to VLAN 10.
<Sysname> system-view
[Sysname] vlan 10
[Sysname-vlan]
# Add a static MAC address entry.
[Sysname] mac-address static 000f-e20f-dc71 interface Ethernet 1/0/2 vlan 1
# Set the aging time of dynamic MAC address entries on Switch to 500 seconds.
[Sysname] mac-address timer aging 500
# Display the MAC address table configuration in system view.
[Sysname] display mac-address interface Ethernet 1/0/2
MAC ADDR VLAN ID STATE PORT INDEX AGING TIME(s)
000f-e20f-dc71 1 Static Ethernet1/0/2 NOAGED
00e0-fc17-a7d6 1 Learned Ethernet1/0/2 AGING
00e0-fc5e-b1fb 1 Learned Ethernet1/0/2 AGING
00e0-fc55-f116 1 Learned Ethernet1/0/2 AGING
# Disable Ethernet 1/0/10 from learning MAC addresses dynamically, and add a static MAC address entry. So that port Ethernet 1/0/10 can only send packets destined for the NMS, and other hosts cannot communicate through this port.
[Sysname] interface Ethernet 1/0/10
[Sysname-Ethernet1/0/10] port access vlan 10
[Sysname-Ethernet1/0/10] mac-address max-mac-count 0
[Sysname-Ethernet1/0/10] mac-address static 0014-222c-aa69 vlan 10
Complete Configuration
#
interface Ethernet1/0/2
port access vlan 10
mac-address static 000f-e20f-dc71 vlan 1
#
interface Ethernet1/0/10
mac-address max-mac-count 0
port access vlan 10
mac-address static 0014-222c-aa69 vlan 10
#
mac-address timer aging 500
Precautions
l When you add a MAC address entry, the port specified by the interface keyword must belong to the VLAN specified by the vlan keyword in the command. Otherwise, the entry will not be added.
l If the VLAN specified by the vlan argument is a dynamic VLAN, after a static MAC address is added, it will become a static VLAN.