62
address entries. For a MAC address, a manually configured static entry takes precedence over a
dynamically learned entry. To improve the security for the user device connected to an interface,
manually configure a static entry to bind the user device to the interface. Then, the frames destined
for the user device (for example, Host A) are always sent out of the interface. Other hosts using the
forged MAC address of Host A cannot obtain the frames destined for Host A.
The MAC address entry configuration cannot survive a reboot unless you save it. The dynamic MAC
address entries, however, are lost upon reboot whether or not you save the configuration.
Examples
# Add a static entry for MAC address 000f-e201-0101 on GigabitEthernet 1/0/1 that belongs to VLAN
2.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-address static 000f-e201-0101 vlan 2
# Add a static entry for MAC address 000f-e201-0101 on Bridge-Aggregation 1 that belongs to VLAN
1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] mac-address static 000f-e201-0102 vlan 1
# Add a multiport unicast MAC address entry for MAC address 0001-0001-0101 on GigabitEthernet
1/0/1 and GigabitEthernet 1/0/2 that belong to VLAN 2.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-address multiport 0001-0001-0101 vlan 2
[Sysname-GigabitEthernet1/0/1] quit
[Sysname] interface gigabitethernet 1/0/2
[Sysname-GigabitEthernet1/0/2] mac-address multiport 0001-0001-0101 vlan 2
Related commands
display mac-address
mac-address (system view)
mac-address (system view)
Use mac-address to add or modify a MAC address entry.
Use
undo mac-address to delete one or all MAC address entries.
Syntax
mac-address { dynamic | static } mac-address interface interface-type
interface
-number vlan vlan-id
mac-address
blackhole mac-address vlan vlan-id
mac-address multiport mac
-address interface interface-list vlan vlan-id
undo mac-address
[ [ dynamic | static ] mac-address interface interface-type
interface
-number vlan vlan-id ]
undo mac-address [ blackhole | dynamic | static ] [ mac-address ] vlan vlan-id
undo mac-address [ dynamic | static ] interface interface-type
interface
-number