Huawei quidway s7700 - Configuring a Static MAC Address Entry

7.3 Configuring a Static MAC Address Entry
A static MAC address entry specifies an outbound interface for packets destined for a specified
MAC address. Static MAC address entries protect the S7700 from MAC address attacks.
Applicable Environment
You can configure a static MAC address entry if an interface is connected to an upstream device
or a server, as shown in Figure 7-1. Attackers may set the source MAC address of packets to
the server MAC address and send the packets to the Switch to intercept data of the server. To
protect the server and ensure communication between users and the server, you can configure a
static MAC address entry in which the destination MAC address is the server MAC address and
the outbound interface is the interface connected to the server.
Figure 7-1 Networking diagram of static MAC address entry configurations
Network Server
Switch
VLAN2
VLAN4LSW
PC1 PC2
Pre-configuration Tasks
None.
Data Preparation
To configure a static MAC address entry, you need the following data.
No.
Data
1 Destination MAC address, destination outbound interface number, name of the VSI
and ID of the VLAN which the outbound interface belongs to
Quidway S7700 Smart Routing Switch
Configuration Guide - Ethernet 7 MAC Address Table Configuration
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
347