No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - Ethernet Switching

CloudEngine 8800, 7800, 6800, and 5800 V200R003C00

This document describes the configuration of Ethernet services, including configuring MAC address table, link aggregation, VLANs, MUX VLAN, Voice VLAN, VLAN mapping, QinQ, GVRP, VCMP, STP/RSTP/MSTP, VBST, SEP, RRPP, ERPS, LBDT, and Layer 2 protocol transparent transmission.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Licensing Requirements and Limitations for MAC Address Tables

Licensing Requirements and Limitations for MAC Address Tables

Involved Network Elements

Other network elements are not required.

License Requirements

The MAC address table is a basic feature of a switch and is not under license control.

Version Requirements

Table 2-5 Products and minimum version supporting the MAC address table

Product

Minimum Version Required

CE8860EI

V100R006C00

CE8861EI/CE8868EI

V200R005C10

CE8850-32CQ-EI

V200R002C50

CE8850-64CQ-EI

V200R005C00

CE7850EI

V100R003C00

CE7855EI

V200R001C00

CE6810EI

V100R003C00

CE6810-48S4Q-LI/CE6810-48S-LI

V100R003C10

CE6810-32T16S4Q-LI/CE6810-24S2Q-LI

V100R005C10

CE6850EI

V100R001C00

CE6850-48S6Q-HI

V100R005C00

CE6850-48T6Q-HI/CE6850U-HI/CE6851HI

V100R005C10

CE6855HI

V200R001C00

CE6856HI

V200R002C50

CE6857EI

V200R005C10

CE6860EI

V200R002C50

CE6865EI

V200R005C00

CE6870-24S6CQ-EI/CE6870-48S6CQ-EI

V200R001C00

CE6870-48T6CQ-EI

V200R002C50

CE6875-48S4CQ-EI

V200R003C00

CE6880EI

V200R002C50

CE5810EI

V100R002C00

CE5850EI

V100R001C00

CE5850HI

V100R003C00

CE5855EI

V100R005C10

CE5880EI

V200R005C10

Feature Limitations

Table 2-6 Description of features

Feature

Description

MAC address entry

  • Dynamic MAC address entries can be learned on an interface only after the interface is added to an existing VLAN.
  • Each static MAC address entry can have only one outbound interface.
  • By default, if a static MAC address is bound to an interface or the port security function is enabled on an interface, other interfaces will discard received packets with the source MAC address being the specific static MAC address or secure MAC address. However, on devices excluding the CE5880EI, CE6870EI, CE6875EI, and CE6880EI, other interfaces will properly forward packets with the source MAC address being the specific static MAC address or secure MAC address, if any of the following functions is configured on the device:

    EVPN, OVSDB, VBDIF interface configured with a MAC address, or a combination of M-LAG and VLANIF interface configured with MAC addresses.

  • If there is a MAC address that is generated based on DHCP snooping binding entries, the MAC address cannot be configured as a static MAC address.
  • The blackhole MAC address can be used as the source or destination MAC address. For the CE6870EI and CE6875EI, the device forwards Layer 3 packets with the source MAC address as the blackhole MAC address.
  • For CE6870EI and CE6875EI, after TRILL is enabled, the blackhole MAC address cannot be configured. If the blackhole MAC address has been configured, enabling TRILL will cause the blackhole MAC address to become invalid.
  • Deleting MAC address entries may cause the reset of the aging time of MAC address entries.
  • After EVN is configured, the aging time of MAC address entries is 30 minutes and cannot be modified.
  • By default, MAC addresses of VBDIF and VLANIF interfaces are dynamically allocated from the MAC address range of the system. You can also run the mac-address command to configure a static MAC address. When the device is connected to the load balancer or firewall or the if-match source-mac command is used on the device, Layer 3 traffic may fail to be forwarded. To address this issue, delete the configured MAC address of the interface.

  • For the CE5880EI, CE6870EI, CE6875EI and CE6880EI, VBDIF interfaces, VLANIF interfaces, and VRR share eight virtual MAC addresses.

MAC address learning

  • MAC address learning limiting rules are invalid for existing online users and valid for only new online users.
  • If the VLANIF interface is not configured, the device can learn the local system MAC address.
  • Disabling MAC address learning and limiting the number of learned MAC addresses are valid for a Layer 2 main interface and its Layer 2 sub-interfaces for the CE6870EI and CE6875EI.
  • The hardware learns MAC address entries at line speed for the CE6870EI and CE6875EI. When many MAC address entries are learned in a short period of time, the number of MAC address entries in the hardware table is larger than the number of MAC address entries in the software table. When many MAC address entries are aged in a short period of time, the number of MAC address entries in the software table is larger than the number of MAC address entries in the hardware table. MAC address entries in the software and hardware tables keep consistent through synchronization.
  • [/manual/task/concept/conbody/section/table/tgroup/tbody/row/entry/p/ul/li/idp:point {""}) (idp:point][/manual/task/concept/conbody/section/table/tgroup/tbody/row/entry/p/ul/li/idp:point {""}) (idp:point]On devices except the CE5880EI, CE6870EI, CE6875EI, and CE6880EI, if the number of MAC addresses learned in the VLAN reaches the upper limit or the MAC address learning function is disabled in the VLAN, the packet discarding function configured using the mac-address limit action discard command does not take effect on interfaces in the VLAN.
  • Port security and MAC address limiting cannot be configured on an interface.
  • In the SVF, disabling MAC address learning cannot be configured in the traffic behavior view.

  • After MAC address limiting is configured on an interface, the VXLAN packets received by an interface on a switch model excluding the CE5880EI, CE6870EI, CE6875EI and CE6880EI are not affected by this function.

  • For CE6870EI and CE6875EI, by default, the TRILL function cannot be configured simultaneously with any of the FCoE, port security, MAC-VLAN, blackhole MAC, disabling MAC address learning, MAC limit, URPF, DHCP snooping, or 802.1x functions. To use these functions simultaneously, run the trill adjacency-check disable command. The TRILL function takes precedence over the preceding functions. If the TRILL function is configured after the preceding functions are configured, only the TRILL function takes effect.

MAC address flapping detection

  • To prevent uplink traffic interruption, do not configure the action performed when MAC address flapping is detected on upstream interfaces.
  • In earlier versions of V100R006C00, MAC address flapping detection is inapplicable to TRILL, VPLS, VXLAN, and EVN networks. In V100R006C00 and later versions, MAC address flapping detection is inapplicable to only the VPLS network.
  • The MAC address flapping detection function can only detect a single ring. When there are multiple rings, the MAC address flapping detection function detects only the first ring. That is, if two or more rings exist in a VLAN, the system reports only alarms about interfaces in the first ring, regardless of whether the port status in the first ring is Up or Down.
  • The MAC address flapping detection function can only detect the first ring in a VLAN within the configurable aging time (5 minutes by default). For example, MAC address flapping between PortA and PortB. After PortA or Port B goes Down and MAC address flapping between PortC and PortD within the same aging time, the flapped interfaces in the alarm are still PortA and PortB.
  • By default, MAC address triggered ARP entry update is enabled. If MAC address flapping occurs for more than 10 times, MAC address triggered ARP entry update is disabled. After MAC address flapping is eliminated, MAC address triggered ARP entry update is enabled automatically.

  • For V200R002C50 and later versions, on models excluding the CE5880EI and CE6880EI, when MAC address flapping occurs on an interface, the system suppresses broadcast, multicast, and unknown unicast packets. In this case, the forwarding rate of the outbound interface is 1% of the bandwidth of the inbound interface. Packets are not suppressed in the following two situations:
    • The interface is configured with storm control and storm suppression.
    • Multicast is enabled globally. In this situation, the system does not suppress multicast packets.
  • When MAC address flapping occurs in a VLAN or BD and the loop is not eliminated, if the interface is added to or removed from an Eth-Trunk, the values of Original-Port and Move-Ports in MAC address flapping records remain unchanged. After the loop is eliminated, delete MAC address flapping entries and perform detection again. This prevents the incorrect source and flapped interfaces from being detected, loop location, and punishment action (Error-Down state or storm control) from being delivered to the incorrect flapped interface.

Other features

  • A switch model excluding the CE5880EI, CE6870EI, CE6875EI, and CE6880EI cannot forward Layer 2 packets whose destination MAC address is a system MAC address.
  • On the CE8860EI, CE8861EI, CE8868EI, CE8850EI, CE7850EI, CE7855EI, CE6865EI, CE6860EI, CE6857EI, CE6850HI, CE6856HI, and CE6855HI, when the big-MAC or large ARP table mode is used and different MAC addresses and rates are used, the hash conflict of the MAC address table is serious and the hash conflict result is different each time. When a hash conflict occurs, the device may fail to learn many MAC addresses and some traffic can only be broadcast.
  • In an SVF composed of box switches in V100R005C10 or later versions, when the mac-address miss action discard command is used, a leaf switch in distributed forwarding mode sends the packets with no matching MAC address entries to the parent switch, and the parent switch directly discards the packets with no matching MAC address entries. A leaf switch in centralized forwarding mode sends the packets with no matching MAC address entries to the parent switch. The parent switch directly discards the packets with no matching MAC address entries.
  • The CE6870EI and CE6875EI cannot be configured to discard packets with the MAC address of all 0s.
Translation
Download
Updated: 2019-05-08

Document ID: EDOC1100004351

Views: 119184

Downloads: 292

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next