H3C Technologies H3C S7500E Series Switches - Manual (Page 119)

9-8
To do… Use the command… Remarks
Configure the MAC learning limit on an
Ethernet port, port group or ONU port
mac-address
max-mac-count count
Required
No MAC learning limit is
configured by default.
Displaying and Maintaining MAC Address Tables
To do… Use the command… Remarks
Display MAC address table
information
display mac-address
[ mac-address [ vlan vlan-id ] |
[ [ dynamic | static ] [ interface
interface-type interface-number ] |
blackhole ] [ vlan vlan-id ]
[ count ] ]
Display the aging timer for
dynamic MAC address entries
display mac-address aging-time
Display the system or interface
MAC address learning state
display mac-address
mac-learning [ interface-type
interface -number ]
Display MAC address statistics display mac-address statistics
Available in any view
MAC Address Table Configuration Example
Network requirements
The MAC address of one host is 000f-e235-dc71 and belongs to VLAN 1. It is connected to
GigabitEthernet2/0/1 of the device. To prevent MAC address spoofing, add a static entry into the
MAC address table of the device for the host.
The MAC address of another host is 000f-e235-abcd and belongs to VLAN 1. Because this host
once behaved suspiciously on the network, you can add a destination blackhole MAC address
entry for the MAC address to drop all packets destined for the host for security sake.
Set the aging timer for dynamic MAC address entries to 500 seconds.
Configuration procedure
# Add a static MAC address entry.
system-view
[Sysname] mac-address static 000f-e235-dc71 interface gigabitethernet 2/0/1 vlan 1
# Add a destination blackhole MAC address entry.
[Sysname] mac-address blackhole 000f-e235-abcd vlan 1
# Set the aging timer for dynamic MAC address entries to 500 seconds.
[Sysname] mac-address timer aging 500