63
undo mac-address multiport mac-address interface interface-list vlan
vlan-id
undo mac-address [ multiport ] [ [ mac-address ] vlan vlan-id ]
Default
The system is not configured with MAC address entries.
Views
System view
Predefined user roles
network-admin
Parameters
dynamic: Specifies dynamic MAC address entries.
static: Specifies static MAC address entries.
blackhole: Specifies blackhole MAC address entries. Packets whose source or destination MAC
addresses match blackhole MAC address entries are dropped.
multiport: Specifies multiport unicast MAC address entries. A frame whose destination MAC
address matches a multiport unicast MAC address entry is sent out of multiple ports.
mac-address: Specifies a MAC address in the format of H-H-H, excluding multicast, all-zero, and
all-F MAC addresses. When entering a MAC address, you can omit the leading zeros in each H
section. For example, enter f-e2-1 for 000f-00e2-0001.
vlan vlan-id: Specifies an existing VLAN to which the interface belongs. The value range for the
vlan-id argument is 1 to 4094.
interface interface-type interface-number: Specifies an outgoing interface by its type
and number.
interface interface-list: Specifies interfaces in the format of { interface-type
interface-number1
[ to interface-type interface-number2 ] } &<1-4>. The
interface can only be a Layer 2 Ethernet interface or Layer 2 aggregate interface. The value for the
interface-number2 argument cannot be lower than the value for the interface-number1
argument.
&<1-4> specifies that you can configure a maximum of 4 interfaces or interface ranges.
Usage guidelines
You can use this command to configure the following types of MAC address entries:
• Dynamic entries.
Dynamic entries include manually configured dynamic entries and automatically learned
dynamic entries.
• Static entries.
For a MAC address, a manually configured static entry takes precedence over a dynamic entry.
To improve the security for the user device connected to an interface, manually configure a
static entry to bind the user device to the interface. Then, the frames destined for the user
device (for example, Host A) are always sent out of the interface. Other hosts using the forged
MAC address of Host A cannot obtain the frames destined for Host A.
• Blackhole entries.
To drop frames with the specified source MAC addresses or destination MAC addresses, you
can configure blackhole entries.
• Multiport unicast entries.
To send frames with a specific destination MAC address out of multiple ports, configure a
multiport unicast entry. When you execute this command for the first time, the command adds
To Next Page
Loading...
Need help?
General