30
Displaying and maintaining MAC address tables
To do… Use the command… Remarks
Display MAC address table
information
display mac-address [ mac-address [ vlan vlan-id ]
| [ [ dynamic | static ] [ interface interface-type
interface-number ] | blackhole ] [ vlan vlan-id ]
[ count ] ] [ | { begin | exclude | include } regular-
expression ]
Available in any
view
Display the aging timer for
dynamic MAC address
entries
display mac-address aging-time [ | { begin |
exclude | include } regular-expression ]
Available in any
view
Display the system or
interface MAC address
learning state
display mac-address mac-learning [ interface-type
interface-number ] [ | { begin | exclude | include }
regular-expression ]
Available in any
view
Display MAC address
statistics
display mac-address statistics [ | { begin | exclude
| include } regular-expression ]
Available in any
view
MAC address table configuration example
Network requirements
• The MAC address of one host is 000f-e235-dc71 and belongs to VLAN 1. It is connected to
GigabitEthernet 1/0/1 of the device. To prevent MAC address spoofing, add a static entry into the
MAC address table of the device for the host.
• The MAC address of another host is 000f-e235-abcd and belongs to VLAN 1. Because this host
once behaved suspiciously on the network, you can add a blackhole MAC address entry for the
MAC address to drop all packets destined for the host.
• Set the aging timer for dynamic MAC address entries to 500 seconds.
Configuration procedure
# Add a static MAC address entry.
<Sysname> system-view
[Sysname] mac-address static 000f-e235-dc71 interface gigabitethernet 1/0/1 vlan 1
# Add a blackhole MAC address entry.
[Sysname] mac-address blackhole 000f-e235-abcd vlan 1
# Set the aging timer for dynamic MAC address entries to 500 seconds.
[Sysname] mac-address timer aging 500
# Display the MAC address entry for port GigabitEthernet 1/0/1.
[Sysname] display mac-address interface gigabitethernet 1/0/1
MAC ADDR VLAN ID STATE PORT INDEX AGING TIME
000f-e235-dc71 1 Config static GigabitEthernet 1/0/1 NOAGED
--- 1 mac address(es) found ---