No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CX11x, CX31x, CX710 (Earlier Than V6.03), and CX91x Series Switch Modules V100R001C10 Configuration Guide 12

The documents describe the configuration of various services supported by the CX11x&CX31x&CX91x series switch modules The description covers configuration examples and function configurations.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuration Task Summary

Configuration Task Summary

This chapter describes the configuration task summary of MAC.

Table 5-7 lists the configuration task summary of MAC address table.

Table 5-7 Configuration task summary of MAC address table
Item Description Task

Configuring the MAC Address Table

This section describes procedures to configure static, blackhole, and dynamic MAC address entries, prevent an interface from learning MAC addresses, limit the number of learned MAC addresses and configure hash algorithms.

Configuring the MAC Address Table

Configuring Port Security

The port security function changes MAC addresses learned on an interface into secure MAC addresses. Only hosts using secure MAC addresses or static MAC addresses can communicate with the device through the interface. This function enhances security of the device.

Configuring Port Security

Configuring MAC Address Anti-flapping

MAC address flapping occurs on a network when the network has a loop or is attacked. To prevent MAC address flapping, you can set MAC address learning priorities for interfaces so that MAC addresses can be learned by correct interfaces. When the same MAC address entries are learned by interfaces of different priorities, the MAC address entries learned by the interface with the highest priority overrides the MAC address entries learned by other interfaces. You can also configure the device to forbid MAC address flapping between interfaces with the same priority.

Configuring MAC Address Anti-flapping

Configuring MAC Address Flapping Detection

MAC address flapping occurs when a MAC address is learned by two interfaces in the same VLAN. The MAC address entry learned later replaces the earlier one.

MAC address flapping detection enables the device to check all MAC addresses. If MAC address flapping occurs, the device sends an alarm to the NMS. You can locate the faulty device according to the alarm and MAC address flapping history records. This greatly improves network maintainability. If the user network connected to the device does not support loop prevention protocols, configure the device to shut down the interfaces where MAC address flapping occurs. This reduces the impact of MAC address flapping on the user network.

Configuring MAC Address Flapping Detection

Configuring the Switch to Discard Packets with an All-0 MAC Address

A faulty device may send packets with an all-zero source or destination MAC address to the switch. You can configure the switch to discard such packets and send an alarm to the network management system (NMS). You can locate the faulty device according to the trap message.

Configuring the Switch Module to Discard Packets with an All-0 MAC Address

Discarding Packets that Cannot Match MAC Address Entries

When a DHCP user goes offline, the MAC address entry of the user ages. If there are packets destined for this user, the system cannot find the MAC address entry. Therefore, it broadcasts the packets to all interfaces in the VLAN. In this case, all users can receive the packets. This affects packet security. This function enables the device to discard packets that cannot match MAC address entries, which reduces workload on the device and improve packet security.

Discarding Packets that Cannot Match MAC Address Entries

Enabling Port Bridge

This function enables an interface to process packets in which the source and destination MAC addresses are the same. It can be configured on a switch connected to a device without Layer 2 forwarding capability or a switch functioning as an access device in a data center.

Enabling Port Bridge

Translation
Download
Updated: 2019-08-09

Document ID: EDOC1000041694

Views: 58690

Downloads: 3621

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next