mac-limit (user access profile view)

Function

The mac-limit command configures MAC address learning limiting in a user access profile.

The undo mac-limit command cancels MAC address learning limiting in a user access profile.

By default, MAC address learning limiting is not configured in a user access profile.

This command can only be executed on a parent switch.

Format

mac-limit maximum max-num

undo mac-limit

Parameters

Parameter	Description	Value
maximum max-num	Specifies the maximum number of MAC addresses that can be learned on an interface.	The value is an integer that ranges from 0 to 4096. The value 0 indicates that the maximum number of MAC addresses that can be learned is not limited.

Views

User access profile view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

After creating a user access profile, you can configure MAC address learning limiting in the profile. When the profile is bound an AS port, MAC address learning limiting is automatically configured on the port. The following configuration is generated on the AS port:

#
 mac-limit maximum max-num
#

To control the number of access users and protect the MAC address table against attacks, you can limit the maximum number of MAC addresses that can be learned on an interface.

Precautions

The mac-limit and authentication commands are mutually exclusive and cannot be configured together in a user access profile.

Example

# Configure MAC address learning limiting in a user access profile.

<HUAWEI> system-view
[HUAWEI] uni-mng
[HUAWEI-um] user-access-profile name profile_1
[HUAWEI-um-user-access-profile_1] mac-limit maximum 1024