65
Predefined user roles
network-admin
Usage guidelines
To prevent the MAC address table from becoming saturated, you can disable MAC address learning.
For example, a number of packets with different source MAC addresses reaching a device can affect
the MAC address table update. To avoid such attacks, you can disable MAC address learning by
following these guidelines:
• You can disable MAC address learning on a per-interface basis. If you disable MAC address
learning globally, MAC address learning is disabled for all interfaces. The device then stops
learning MAC addresses and cannot dynamically update the MAC address table.
• Because disabling MAC address learning can result in broadcast storms, enable broadcast
storm suppression after you disable MAC address learning on an interface. For more
information about broadcast storm suppression, see Interface Configuration Guide.
• With MAC address learning enabled globally, you can disable MAC address learning for an
interface or VLAN.
• After MAC address learning is disabled, the device immediately deletes existing dynamic MAC
address entries.
Examples
# Disable MAC address learning globally.
<Sysname> system-view
[Sysname] undo mac-address mac-learning enable
# Disable MAC address learning for VLAN 10.
<Sysname> system-view
[Sysname] vlan 10
[Sysname-vlan10] undo mac-address mac-learning enable
# Disable MAC address learning on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] undo mac-address mac-learning enable
# Disable MAC address learning on Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] undo mac-address mac-learning enable
Related commands
display mac-address mac-learning
mac-address mac-move fast-update
Use mac-address mac-move fast-update to enable ARP fast update for MAC address
moves.
Use undo mac-address mac-move fast-update to disable ARP fast update for MAC address
moves.
Syntax
mac-address mac-move fast-update
undo mac-address mac-move fast-update