H3C Technologies H3C WX5500E Series Access Controllers - Manual (Page 169)

159
To improve port security, you can bind specific user devices to the port by manually adding MAC address
entries to the MAC address table of the device.
Types of MAC address entries
A MAC address table can contain the following types of entries:
• Static entries—Manually added and never age out.
• Dynamic entries—Manually added or dynamically learned, and might age out.
• Blackhole entries—Manually configured and never age out. They are configured for filtering out
frames with specific destination MAC addresses. For example, to block all packets destined for a
specific user for security concerns, you can configure the MAC address of this user as a blackhole
MAC address entry.
A static or blackhole MAC address entry can overwrite a dynamic MAC address entry, but not vice
versa.
MAC address table-based frame forwarding
When forwarding a frame, the device adopts the following forwarding modes based on the MAC
address table:
• Unicast mode—If an entry is available for the destination MAC address, the device forwards the
frame out of the outgoing port indicated by the MAC address entry.
• Broadcast mode—If the device receives a frame with all Fs as the destination address, or no entry
is available for the destination MAC address, the device floods the frame to all the interfaces except
the receiving interface.
Displaying and configuring MAC address entries
1. Select Network > MAC from the navigation tree.
The system automatically displays the MAC tab, which shows all the MAC address entries on the
device.