H3C Technologies H3C SecPath F1000-E - Manual (Page 75)

50
Item Description
Type
Set the type of the MAC address entry:
• Static—Static MAC address entries that never age out.
• Dynamic—Dynamic MAC address entries that will age out.
• Blackhole—Blackhole MAC address entries that never age out.
IMPORTANT:
The tab displays the following types of MAC address entries:
• Config static—Static MAC address entries manually configured by the users.
• Config dynamic—Dynamic MAC address entries manually configured by the
users.
• Blackhole—Blackhole MAC address entries.
• Learned—Dynamic MAC address entries learned by the firewall.
• Other—Other types of MAC address entries.
VLAN ID of the VLAN to which the MAC address belongs.
Port
Port to which the MAC address belongs. This configuration item is not required for
blackhole MAC address entries.
Setting the aging time for MAC address entries
Select Network > MAC > Setting from the navigation tree to enter the page for setting the MAC address
entry aging time, as shown in
Figure 34 .
Figure 34 Setting the aging time for MAC address entries
Table 8 Configuration items
Item Description
No-aging MAC address entries will not age out.
Aging time Enter the aging time for MAC address entries.
MAC address table configuration example
Network requirements
Host A (000f-e235-dc71) belongs to VLAN 1, and is connected to GigabitEthernet 0/1 of SecPath; Host
B (000f-e235-abcd), which once behaved suspiciously on the network, belongs to VLAN 1.
To prevent MAC address spoofing, add a static entry for Host A in the MAC address table of the SecPath
firewall.