Huawei quidway s7700 - Example for Configuring the Limitation on MAC Address Learning Based on Vlans

#
sysname Quidway
#
vlan batch 2
#
mac-address aging-time 500
#
interface GigabitEthernet1/0/1
port hybrid pvid vlan 2
port hybrid untagged vlan 2
port vlan-mapping vlan 4 map-vlan 2
#
interface GigabitEthernet1/0/2
port hybrid pvid vlan 2
port hybrid untagged vlan 2
#
mac-address static 0002-0002-0002 GigabitEthernet1/0/1 vlan 2
mac-address static 0003-0003-0003 GigabitEthernet1/0/1 vlan 2
mac-address static 0004-0004-0004 GigabitEthernet1/0/2 vlan 2
#
return
7.14.2 Example for Configuring the Limitation on MAC Address
Learning Based on VLANs
Networking Requirements
As shown in Figure 7-7, user network 1 is connected to GE 1/0/1 on the Switch through an
LSW. User network 2 is connected to GE 2/0/1 on the Switch through another LSW. GE 1/0/1
and GE 2/0/1 belong to VLAN 2. To prevent MAC address attacks and control the number of
access users, you need to limit the MAC address learning in VLAN 2.
Figure 7-7 Networking diagram for configuring the limitation on MAC address learning based
on VLAN
Network
User
network 1
User
network 2
VLAN 2
GE1/0/1
GE2/0/1
Switch
LSW
LSW
Quidway S7700 Smart Routing Switch
Configuration Guide - Ethernet 7 MAC Address Table Configuration
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
372