port-security static-flapping protect

Function

The port-security static-flapping protect command enables static MAC address flapping detection.

The undo port-security static-flapping protect command disables static MAC address flapping detection.

By default, static MAC address flapping detection is disabled.

Format

port-security static-flapping protect

undo port-security static-flapping protect

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Secure MAC addresses are also static MAC address. When an interface receives a packet whose source MAC address exists in the static MAC address table on another interface, the interface discards this packet. This affects customer services. For example, if PC 1 connects to GE0/0/1 where the sticky MAC address function is enabled, the static MAC address table of GE0/0/1 includes PC 1's MAC address. After PC 1 is disconnected from GE0/0/1 and then connected to GE0/0/2, GE0/0/2 discards the packets from PC 1. In this situation, you can enable static MAC address flapping detection. The interface will then take the configured action for the GE0/0/2.

Precautions

Static MAC address flapping detection needs to be enabled only on the interfaces with port security enabled.

Example

# Enable static MAC address flapping detection.

<HUAWEI> system-view
[HUAWEI] port-security static-flapping protect