No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE40E V800R010C10SPC500 Feature Description - Security 01

This is NE40E V800R010C10SPC500 Feature Description - Security
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Application Scenarios for MAC Address Limit

Application Scenarios for MAC Address Limit

MAC Address Limit on an Inbound Interface

Currently, interfaces on the NE40E can function as Layer 2 interfaces. A Layer 2 interface on the device can be connected to multiple Layer 2 user networks belonging to different VLANs.

You can enable MAC address limit on Layer 2 interfaces of the NE40E to control the total number of MAC addresses that can be learnt from all the attached user networks, regardless of the VLANs to which each user network belongs. On the network shown in Figure 8-3, you can configure MAC address limit on port1 of the NE40E.

Figure 8-3 Diagram of MAC address limit on an Inbound Interface

MAC Address Limit for One or More VLANs to Which an Inbound Interface Belongs

In addition to MAC address limit on an inbound interface, you can also configure MAC address limit for one or more specific VLANs to which an inbound interface belongs.

On the network shown in Figure 8-3, you can configure MAC address limit based on Port+VLAN on port1 of the NE40E to restrict the number of MAC addresses barely on VLAN 10 or VLAN 20.

MAC Address Limit on an Inbound Sub-Interface

By default, Layer 2 forwarding is prohibited on a sub-interface. Therefore, MAC address limit cannot be configured on a sub-interface. When a sub-interface is bound to a VSI, however, Layer 2 forwarding can be implemented on the sub-interface, and thus MAC address limit can be configured on the sub-interface.
Figure 8-4 MAC Address Limit on an Inbound Sub-Interface

MAC Address Limit on an Inbound Sub-Interface for QinQ VLAN Tag Termination

Like any other common sub-interface, a sub-interface for QinQ VLAN tag termination needs to implement Layer 2 forwarding and be configured with MAC address limit when accessing the VPLS service. The NE40E allows you to set the maximum number of MAC addresses to be learnt by a sub-interface for QinQ VLAN tag termination and the forwarding behavior after the maximum number is reached, as shown in Figure 8-4.

Translation
Download
Updated: 2019-01-03

Document ID: EDOC1100055047

Views: 12719

Downloads: 31

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next