No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - Ethernet Switching

S7700 and S9700 V200R011C10

This document describes the configuration of Ethernet services, including configuring link aggregation, VLANs, Voice VLAN, VLAN mapping, QinQ, GVRP, MAC table, STP/RSTP/MSTP, SEP, and so on.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring Global MAC Address Flapping Detection

Configuring Global MAC Address Flapping Detection

Context

Global MAC address flapping detection enables the device to check all MAC addresses to detect MAC address flapping.

NOTE:
  • Configuring an action to take for MAC address flapping on an uplink interface may cause interruption of important uplink traffic, and such configuration is not recommended.
  • The device enabled with MAC address flapping detection can detect loops on a single point, but cannot obtain the entire network topology. If the network connected to the device supports loop prevention protocols, use the loop prevention protocols instead of MAC address flapping detection to eliminate loops.
  • If only a few VLANs on the user network encounter loops, it is recommended that you set the loop prevention action to quit-vlan.
  • If a large number of VLANs on the user network encounter loops, it is recommended that you set the loop prevention action to error-down. This action improves system performance. Additionally, the remote device can detect the error-down event so that it can quickly switch traffic to a backup link (if any).

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run mac-address flapping detection

    Global MAC address flapping detection is enabled.

    By default, Global MAC address flapping detection is enabled. The device detects MAC address flapping in all VLANs.

  3. (Optional) Run mac-address flapping detection exclude vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>

    One or more VLANs are excluded from MAC address flapping detection.

    By default, the system performs MAC address flapping detection in all VLANs. In special scenarios, for example, when a switch is connected to a server with two network adapters in active-active mode, the server's MAC address may be learned on two interfaces of the switch. Such a MAC address flapping event does not need to be handled. You can exclude the VLAN where the server resides from MAC address flapping detection.

  4. (Optional) Run mac-address flapping detection vlan { { vlan-id1 [ to vlan-id2 ] } &<1-10> | all } security-level { high | middle | low }

    The security level of MAC address flapping detection is configured in one or more specified VLANs.

    By default, the security level of MAC address flapping detection is middle. That is, the system considers that MAC address flapping occurs when a MAC address flaps 10 times.

  5. (Optional) Run mac-address flapping aging-time aging-time

    The aging time of flapping MAC addresses is set.

    By default, the aging time of flapping MAC addresses is 300 seconds. If the aging time of dynamic MAC addresses is long, a MAC address flapping event may be detected after a long time. To ensure that the system detects MAC address flapping quickly, shorten the aging time of flapping MAC addresses.

  6. (Optional) Configure an action to take after MAC address flapping is detected on an interface and the priority of the action.
    1. Run interface interface-type interface-number

      The interface view is displayed.

    2. Run mac-address flapping action { quit-vlan | error-down }

      An action is specified for the interface if MAC address flapping occurs on the interface.

      By default, no action is configured. If an interface is connected to a user network that does not support loop prevention protocols, MAC address flapping may occur when there is a loop on the user network. Use this command to configure an action on the interface. When MAC address flapping is detected on the interface, the device takes the configured action. If the action is set to error-down, the device shuts down the interface. If the action is set to quit-vlan, the device removes the interface from the VLAN where MAC address flapping occurs. Only one interface can be shut down during one aging time of flapping MAC addresses.

      NOTE:
      • Do not use the quit-vlan action together with dynamic VLAN functions such as GVRP, HVRP.
      • When a MAC address flaps between an interface configured with the error-down action and an interface configured with the quit-vlan action, the former interface is shut down and the latter interface is removed from the VLAN. If a loop may be generated between some interfaces, configure the same action for all the interfaces.

    3. Run mac-address flapping action priority priority

      The priority of the action against MAC address flapping is set.

Verifying the Configuration

Run the display mac-address flapping command to check information about MAC address flapping detection in a VLAN.

Action to Take After MAC Address Flapping Occurs

The device that has MAC address flapping detection configured reports alarms when it detects MAC address flapping. If the same alarm is reported multiple times, a loop may exist on the network. To remove the loop, run the shutdown command to shut down the interface specified in the MAC address flapping alarm. Alternatively, configure an action against MAC address flapping on the interface to remove the loop.

When configuring an action against MAC address flapping on an interface to remove a loop, pay attention to the following points:

  • When the action is set to error-down, the interface cannot be automatically restored after it is shut down. You can only restore the interface by running the shutdown and undo shutdown commands or the restart command in the interface view.

    To enable the interface to go Up automatically, you must run the error-down auto-recovery cause mac-address-flapping command in the system view before the interface enters the error-down state. This command enables an interface in error-down state to go Up and sets a recovery delay. The interface goes Up automatically after the delay.

  • If the action is set to quit-vlan, the interface can be automatically restored after a delay after it is removed from the VLAN. The default recovery delay is 10 minutes. The recovery delay time can be set using the mac-address flapping quit-vlan recover-time time-value command in the system view.
Translation
Download
Updated: 2019-10-18

Document ID: EDOC1000178310

Views: 286914

Downloads: 141

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next