Table of Contents

1 MAC Address Table Management Configuration Guide· 1-1

MAC Address Table Management 1-1

Network Diagram·· 1-1

Networking and Configuration Requirements· 1-1

Applicable Product Matrix· 1-1

Configuration Procedure· 1-2

Complete Configuration· 1-2

Precautions· 1-3

 

MAC Address Table Management

The S3600 series provide the MAC address table management function. Through configuration commands, you can add/modify/remove a MAC address, set the aging time for dynamic MAC addresses, and set the maximum number of MAC addresses an Ethernet port can learn.

Network Diagram

Figure 1-1 Network diagram for MAC address table management configuration

 

Networking and Configuration Requirements

Server is connected to Switch through port Ethernet 1/0/2.  Configure a static MAC address containing the Server MAC address on Switch, so that Switch can unicast rather than broadcast packets destined for Server through Ethernet 1/0/2.  Port Ethernet 1/0/10 is connected with a network management server (NMS). For network management security, configure Ethernet 1/0/10 to permit the access of this NMS only.

l          The Server MAC address is 000f-e20f-dc71.

l          Port Ethernet 1/0/2 belongs to VLAN 10.

l          The NMS MAC address is 0014-222c-aa69.

Applicable Product Matrix

Product series	Software version	Hardware version
S5600 series	Release 1510, Release1602	All versions
S5100-SI/EI series	Release 2200, Release2201	All versions
S3600-SI/EI series	Release 1510, Release1602	All versions
S3100-EI series	Release 2104, Release 2107	All versions
S3100-C-SI series S3100-T-SI series	Release 0011, Release 2102, Release 2107	All versions
S3100-52P	Release 1500, Release 1602	S3100-52P

 

Configuration Procedure

# Add ports Ethernet 1/0/5 and Ethernet 1/0/2 to VLAN 10.

<Sysname> system-view

[Sysname] vlan 10

[Sysname-vlan]

# Add a static MAC address entry.

[Sysname] mac-address static 000f-e20f-dc71 interface Ethernet 1/0/2 vlan 1

# Set the aging time of dynamic MAC address entries on Switch to 500 seconds.

[Sysname] mac-address timer aging 500

# Display the MAC address table configuration in system view.

[Sysname] display mac-address interface Ethernet 1/0/2

MAC ADDR          VLAN ID STATE   PORT INDEX       AGING TIME(s)

000f-e20f-dc71    1       Static  Ethernet1/0/2    NOAGED

00e0-fc17-a7d6    1       Learned Ethernet1/0/2    AGING

00e0-fc5e-b1fb    1       Learned Ethernet1/0/2    AGING

00e0-fc55-f116    1       Learned Ethernet1/0/2    AGING

# Disable Ethernet 1/0/10 from learning MAC addresses dynamically, and add a static MAC address entry. So that port Ethernet 1/0/10 can only send packets destined for the NMS, and other hosts cannot communicate through this port.

[Sysname] interface Ethernet 1/0/10

[Sysname-Ethernet1/0/10] port access vlan 10

[Sysname-Ethernet1/0/10] mac-address max-mac-count 0

[Sysname-Ethernet1/0/10] mac-address static 0014-222c-aa69 vlan 10

Complete Configuration

#

interface Ethernet1/0/2

 port access vlan 10

 mac-address static 000f-e20f-dc71 vlan 1

#

interface Ethernet1/0/10

 mac-address max-mac-count 0

 port access vlan 10

 mac-address static 0014-222c-aa69 vlan 10

#                 

 mac-address timer aging 500

Precautions

l          When you add a MAC address entry, the port specified by the interface keyword must belong to the VLAN specified by the vlan keyword in the command. Otherwise, the entry will not be added.

l          If the VLAN specified by the vlan argument is a dynamic VLAN, after a static MAC address is added, it will become a static VLAN.