Huawei AR550 Series - Example for Configuring MAC Address Limiting Rules on Interfaces

[Router-Ethernet2/0/1] port-security protect-action protect
# Set the maximum number of MAC addresses that can be learned on the interface.
[Router-Ethernet2/0/1] port-security max-mac-num 4
# To enable the port security function on other interfaces, repeat the preceding steps.
Step 3 Verify the configuration.
# The PCs cannot access the company intranet.
----End
Configuration Files
Configuration file of the Router
#
vlan batch 10
#
interface Ethernet2/0/1
port link-type trunk
port trunk allow-pass vlan 10
port-security enable
port-security protect-action protect
port-security mac-address sticky
port-security max-mac-num 4
#
return
1.7.3 Example for Configuring MAC Address Limiting Rules on
Interfaces
Networking Requirements
As shown in Figure 1-6, Ethernet2/0/1 and Ethernet2/0/2 of the Router are connected to LSWs.
One LSW is connected to individual users, and the other is connected to enterprise users. To
prevent MAC address attacks and limit the number of access users on the Router, configure
MAC address limiting rules on Ethernet2/0/1 and Ethernet2/0/2.
Figure 1-6 Network diagram for MAC address limiting on interfaces
Router
Eth2/0/2Eth2/0/1
IP
network
LSW LSW
……
Individual
user
Enterprise
user
Huawei AR530&AR550 Series Industrial Switch Routers
Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration
Issue 01 (2014-11-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
23