H3C Technologies H3C SecPath F1000-E - Manual (Page 76)

51
For security, add a destination blackhole MAC address entry for Host B’s MAC address, so that all
packets destined for Host B will be dropped.
Set the aging timer for dynamic MAC address entries to 500 seconds.
Configuration procedure
NOTE:
Before making the following configurations, check whether GigabitEthernet 0/1 operates in router mode.
If yes, change its operating mode to bridge mode (To do that, select Device Management > Interface from
the navigation tree, and then find and select GigabitEthernet 0/1 to configure it accordingly); in addition,
specify the security zone to which GigabitEthernet 0/1 belongs.
# Create a static MAC address entry.
• Select Network > MAC > MAC from the navigation tree to enter the MAC address table display
page, click Add, and make the following configurations on the page as shown in
Figure 35 .
Figure 35 Creating a static MAC address entry
• Enter MAC address 000f-e235-dc71.
• Select static in the Type list.
• Select 1 in the VLAN list.
• Select GigabitEthernet0/1 in the Port list.
• Click Apply.
# Create a blackhole MAC address entry.
• Click Add, and make the following configurations on the page as shown in Figure 36 .