H3c-technologies H3C WX5500E Series Access Controllers Manual do Utilizador descarregar pdf (Página 169)

159

To improve port security, you can bind specific user devices to the port by manually adding MAC address

entries to the MAC address table of the device.

Types of MAC address entries

A MAC address table can contain the following types of entries:

• Static entries—Manually added and never age out.

• Dynamic entries—Manually added or dynamically learned, and might age out.

• Blackhole entries—Manually configured and never age out. They are configured for filtering out

frames with specific destination MAC addresses. For example, to block all packets destined for a

specific user for security concerns, you can configure the MAC address of this user as a blackhole

MAC address entry.

A static or blackhole MAC address entry can overwrite a dynamic MAC address entry, but not vice

versa.

MAC address table-based frame forwarding

When forwarding a frame, the device adopts the following forwarding modes based on the MAC

address table:

• Unicast mode—If an entry is available for the destination MAC address, the device forwards the

frame out of the outgoing port indicated by the MAC address entry.

• Broadcast mode—If the device receives a frame with all Fs as the destination address, or no entry

is available for the destination MAC address, the device floods the frame to all the interfaces except

the receiving interface.

Displaying and configuring MAC address entries

1. Select Network > MAC from the navigation tree.

The system automatically displays the MAC tab, which shows all the MAC address entries on the

device.

1 2 ... 164 165 166 167 168 169 170 171 172 173 174 ... 253 254

Sem comentários

H3c-technologies H3C WX5500E Series Access Controllers Manual do Utilizador Página 169