HP 12500 Series Command Reference Manual page 11

Routing, layer 2 - lan switching
Table of Contents

Advertisement

undo mac-address [ [ dynamic | static ] mac-address interface interface-type interface-number vlan
vlan-id ]
undo mac-address [ blackhole | dynamic | static ] [ mac-address ] vlan vlan-id
undo mac-address [ dynamic | static ] interface interface-type interface-number
undo mac-address multiport mac-address interface interface-list vlan vlan-id
undo mac-address [ multiport ] [ [ mac-address ] vlan vlan-id ]
Default
The system is not configured with any MAC address entry.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
dynamic: Specifies dynamic MAC address entries.
static: Specifies static MAC address entries
blackhole: Specifies blackhole MAC address entries. The frames whose source or destination MAC
addresses match blackhole MAC address entries are dropped.
multiport: Specifies multiport unicast MAC address entries. A frame whose destination MAC
address matches a multiport unicast MAC address entry is repeated out of multiple ports.
mac-address: Specifies a MAC address in the format of H-H-H, excluding multicast and all-zero
MAC addresses. When entering a MAC address, you can omit the leading zeros in each H section.
For example, enter f-e2-1 for 000f-00e2-0001.
vlan vlan-id: Specifies an existing VLAN to which the interface belongs. The vlan-id argument
ranges from 1 to 4094.
interface interface-type interface-number: Specifies an outgoing interface by its type and number.
interface interface-list: Specifies interfaces in the format of { interface-type interface-number [ to
interface-type interface-number ] } &<1-n>. The interface type can be the Layer 2 Ethernet interface
or Layer 2 aggregate interface. &<1-n> specifies that you can configure up to n interfaces or
interface ranges. The value range for n is 1 to 4.
Usage guidelines
Generally, the device automatically builds the MAC address table by learning the source MAC
addresses of incoming frames on each interface. To improve interface security, you can manually
add the specific MAC address entries to the MAC address table and bind the user device to the
interface. Because manually configured entries have higher priority than dynamically learned
entries, using manually configured entries prevents hackers from using forged MAC addresses to
steal data.
To drop the frames with the specified source MAC addresses or destination MAC addresses, you
can configure blackhole MAC address entries.
A multiport unicast MAC address entry is used to repeat frames with a specific destination MAC
address out of multiple ports. When you execute this command for the first time, the command
6

Advertisement

Table of Contents
loading

Table of Contents