H3C Technologies H3C S5560 Series Switches - Manual (Page 42)

8
Disabling MAC address learning
MAC address learning is enabled by default. To prevent the MAC address table from being saturated
when the device is experiencing attacks, disable MAC address learning. For example, you can disable
MAC address learning to prevent the device from being attacked by a large amount of frames with
different source MAC addresses.
When MAC address learning is disabled, the device immediately deletes the existing dynamic MAC
address entries.
Disabling global MAC address learning
Step Command Remarks
1. Enter system view. system-view N/A
2. Disable global MAC address
learning. undo mac-address mac-learning
enable By default, global MAC address
learning is enabled.
Disabling global MAC address learning disables MAC address learning on all interfaces.
The global MAC address learning configuration does not take effect in a VPLS VSI. For information about
VSIs, see MPLS Configuration Guide.
Disabling MAC address learning on an interface
When global MAC address learning is enabled, you can disable MAC address learning on a single
interface.
To disable MAC address learning on an interface:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
• Enter Layer 2 Ethernet interface
view:
interface interface-type
interface-number
• Enter Layer 2 aggregate interface
view:
interface bridge-aggregation
interface-number
N/A
3. Disable MAC address
learning on the interface. undo mac-address mac-learning
enable
By default, MAC address
learning on the interface is
enabled.
Disabling MAC address learning on a VLAN
When global MAC address learning is enabled, you can disable MAC address learning on a per-VLAN
basis.