< Home

mac-address flapping detection vlan security-level

Function

The mac-address flapping detection vlan security-level command configures the security level of VLANs for MAC address flapping detection.

The undo mac-address flapping detection vlan security-level command restores the default security of VLANs for MAC address flapping detection.

By default, the security level of a VLAN for MAC address flapping detection is middle. At this security level, the system considers that a MAC address flapping occurs when a MAC address moves between interfaces 10 times.

Format

mac-address flapping detection vlan { { vlan-id1 [ to vlan-id2 ] } &<1-10> | all } security-level { high | middle | low }

undo mac-address flapping detection vlan { { vlan-id1 [ to vlan-id2 ] } &<1-10> | all } security-level [ high | middle | low ]

Parameters

Parameter

Description

Value

vlan-id1 [ to vlan-id2 ]

Specifies the VLANs of which the security level needs to be set for MAC address flapping detection.

  • vlan-id1 specifies the ID of the first VLAN.
  • to vlan-id2 specifies the ID of the last VLAN.

The value of vlan-id2 must be larger than the value of vlan-id1.

You can specify a maximum of 10 VLAN ID ranges in a command.

  • The value of vlan-id1 is an integer that ranges from 1 to 4094.
  • The value of vlan-id2 is an integer that ranges from 1 to 4094.
all

Configures security level of all VLANs for MAC address flapping detection.

-

high

Sets the security level of specified VLANs to high. At this security level, the system considers that a MAC address flapping occurs when a MAC address moves between interfaces three times.

-

middle

Sets the security level of specified VLANs to middle. At this security level, the system considers that a MAC address flapping occurs when a MAC address moves between interfaces 10 times.

-

low

Sets the security level of specified VLANs to low. At this security level, the system considers that a MAC address flapping occurs when a MAC address moves between interfaces 50 times.

-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

By default, the switch considers that a MAC address flapping occurs when a MAC address moves between interfaces 10 times. On an unstable network, it may be a normal situation when a MAC address moves between interfaces 10 times. You can set the security level for VLANs according to the actual situation of your network. The switch reports a MAC address flapping when a MAC address moves between interfaces for the specified number of times.

Example

# Set the security level of VLAN 5 to high for MAC address flapping.

<HUAWEI> system-view
[HUAWEI] mac-address flapping detection vlan 5 security-level high
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >