H3C S5560X-EI Series - Managing MAC Address Entries; Configuring Static Remote-MAC Address Entries; Disabling Remote-MAC Address Learning

12
• A remote AAA server issues an authorization VSI to the user.
For a dynamic Ethernet service instance to match traffic by source MAC address, enable
MAC-based traffic match mode for the dynamic Ethernet service instance.
To enable MAC-based traffic match mode for dynamic Ethernet service instances on an interface:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter Layer 2 Ethernet
interface view.
interface
interface-type
interface-number
N/A
3. Enable MAC-based traffic
match mode for dynamic
Ethernet service instances
on the interface.
mac-based ac
By default, VLAN-based traffic
match mode is used for dynamic
Ethernet service instances.
Managing MAC address entries
Local-MAC address entries can be dynamically learned. You can log local-MAC changes.
Remote-MAC address entries include the following types:
• Manually created static entries.
• Dynamic entries learned in the data plane.
Configuring static remote-MAC address entries
Do not configure static remote-MAC entries for VXLAN tunnels that are automatically established by
using EVPN.
• EVPN re-establishes VXLAN tunnels if the transport-facing interface goes down and then
comes up. If you have configured static remote-MAC entries, the entries are deleted when the
tunnels are re-established.
• EVPN re-establishes VXLAN tunnels if you perform configuration rollback. If the tunnel IDs
change during tunnel re-establishment, configuration rollback fails, and static remote-MAC
entries on the tunnels cannot be restored.
For more information about EVPN, see EVPN Configuration Guide.
To configure a static remote-MAC address entry:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Add a static
remote-MAC address
entry.
mac-address static
mac-address
interface
tunnel
tunnel-number
vsi
vsi-name
By default, VXLAN VSIs do not have static
remote-MAC address entries.
For the setting to take effect, make sure the
VSI's VXLAN has been created and
specified on the VXLAN tunnel.
Disabling remote-MAC address learning
Step Command Remarks
1. Enter system view.
system-view
N/A