H3C Technologies H3C S10500 Series Switches - Manual (Page 38)

27
To do… Use the command… Remarks
Display the system or interface
MAC address learning state
display mac-address mac-learning [ interface-type
interface-number ] [ | { begin | exclude | include }
regular-expression ]
Available in any view
Display MAC address
statistics display mac-address statistics [ | { begin | exclude |
include } regular-expression ]
Available in any view
MAC address table configuration example
Network requirements
As shown in Figure 6 :
• The MAC address of Host A is 000f-e235-dc71 and belongs to VLAN 1. It is connected to
GigabitEthernet 1/0/1 of the device. To prevent MAC address spoofing, add a static entry for the
host in the MAC address table of the device.
• The MAC address of Host B is 000f-e235-abcd and belongs to VLAN 1. For security, because this
host once behaved suspiciously on the network, add a blackhole MAC address entry for the host
MAC address, so that all packets destined for the host will be dropped.
• Set the aging timer for dynamic MAC address entries to 500 seconds.
Figure 6 Network diagram for MAC address table configuration
Host A
000f-e235-dc71
Host B
000f-e235-abcd
Device
GE1/0/1
VLAN 1
GE1/0/2
VLAN 1
Configuration procedure
# Add a static MAC address entry.
system-view
[Sysname] mac-address static 000f-e235-dc71 interface gigabitethernet 1/0/1 vlan 1
# Add a blackhole MAC address entry.
[Sysname] mac-address blackhole 000f-e235-abcd vlan 1
# Set the aging timer for dynamic MAC address entries to 500 seconds.
[Sysname] mac-address timer aging 500
# Display the MAC address entry for port GigabitEthernet 1/0/1.
[Sysname] display mac-address interface gigabitethernet 1/0/1
MAC ADDR VLAN ID STATE PORT INDEX AGING TIME(s)
000f-e235-dc71 1 Config static GigabitEthernet 1/0/1 NOAGED