Chapter4MACAddressT ableConguration
Thedetailedcongurationisasfollows:
St-
ep
CommandFunction
1
ZXR10(config)#macprotect[interface<port-name
>]{disable|enable}
ThissetsportMACaddress
learningprotection.
2
ZXR10(config)#macprotecttime<time>ThissetsportMACaddress
learningprotectiontime.
MACaddresslearningprotectionisdisabledonallswitchportsby
default.T oenablethisfunction,itisrecommendedtosetasmaller
MACaddresscountlimit.
SettingPortUnkownSourceMAC
AddressFiltering
Bydefault,theportunkownsourceMACaddresslteringfunction
isclosed.AportdoesnotlterunkownsourceMACaddress.Ifone
portenablesunkownsourceMACaddresslteringfunction,the
correspondingportwilldiscardtheunkownsourceMACaddress
packetsfromthisport.
TosetportunkownsourceMACaddresslteringonaport,usethe
followingcommand.
CommandFunction
ZXR10(config)#macunknowsource-filterinterface
<port-name>{disable|enable}
Thissetsportunkownsource
MACaddresslteringonaport.
SettingMACAddressFiltering
Topreventunauthorizedaccess,ZXR105900Esupportltering
dataframesaccordingtoMACaddresses.Therearethreeltering
modes:
�SourceMACaddressmatchingonly,thatis,adataframeis
droppedwhenitssourceMACaddressmatchesthesetting.
�DestinationMACaddressmatchingonly,thatis,adataframeis
droppedwhenitsdestinationMACaddressmatchesthesetting.
�Source/DestinationMACaddressmatching,thatis,adata
frameisdroppedwhenitssourceordestinationMACaddress
matchesthesetting.
TosetMACaddressltering,usethefollowingcommand.
CommandFunction
ZXR10(config)#macfilter{source|both|destination}<m
ac-address>vlan<vlan-id>
ThissetsMACaddressltering.
CondentialandProprietaryInformationofZTECORPORATION33