H3C Technologies H3C S5120 Series Switches - Manual (Page 667)

1-3
Figure 1-1 Forward frames using the MAC address table
Configuring a MAC Address Table
The MAC address table configuration tasks include:
z Configuring MAC Address Table Entries
z Configuring the Aging Timer for Dynamic MAC Address Entries
z Configuring the MAC Learning Limit
These configuration tasks are all optional and order independent. You can perform them as needed in
any order.
Configuring MAC Address Table Entries
Usually, a device can populate its MAC address table automatically by learning the source MAC
addresses of received frames.
To improve port security, you can manually add MAC address entries to the MAC address table to bind
ports with MAC addresses, thus fending off MAC address spoofing attacks.
In addition, you can configure blackhole MAC address entries to filter out packets with certain source or
destination MAC addresses.
Follow these steps to add, modify, or remove entries in the MAC address table globally:
To do… Use the command… Remarks
Enter system view system-view —
Add/modify a MAC address
entry
mac-address { dynamic |
static } mac-address interface
interface-type interface-number
vlan vlan-id
mac-address blackhole
mac-address vlan vlan-id
Required