The mac-address static bridge-domain command configures a static MAC address entry for a VXLAN tunnel.
The undo mac-address static bridge-domain command deletes a static MAC address entry of a VXLAN tunnel.
By default, no static MAC address entry is configured for any VXLAN tunnel.
mac-address static mac-address bridge-domain bd-id source source-ip-address peer peer-ip vni vni-id
mac-address static mac-address bridge-domain bd-id source-ipv6 sourceIpv6 peer-ipv6 peerIPv6 vni vni-id
undo mac-address static mac-address bridge-domain bd-id [ [ source source-ip-address ] [ peer peer-ip ] [ vni vni-id ] ]
undo mac-address static mac-address bridge-domain bd-id [ [ source-ipv6 sourceIpv6 ] [ peer-ipv6 peerIPv6 ] [ vni vni-id ] ]
| Parameter | Description | Value |
|---|---|---|
| mac-address |
Specifies a destination MAC address. |
The value is a 12-digit hexadecimal number, in the format of H-H-H. Each H is 4 digits. If an H contains fewer than 4 digits, the left-most digits are padded with zeros. For example, e0 is displayed as 00e0. The MAC address cannot be set to FFFF-FFFF-FFFF or a multicast address starting with 01. |
| bd-id |
Specifies a BD to which a VNI is to be mapped. |
The value is an integer ranging from 1 to 16777215. |
| source source-ip-address |
Specifies the IP address of a local VTEP. |
The value is in dotted decimal notation. |
| peer peer-ip |
Specifies an IP address for a remote VTEP. |
The value is in dotted decimal notation. |
| vni vni-id |
Specifies a VNI ID. |
The value is an unsigned integer. The value range is adjusted based on hardware configuration, and the default maximum range is 0 to 4294967295. |
| source-ipv6 sourceIpv6 |
Specifies an IPv6 address for a local VTEP. |
The address is a 32-digit hexadecimal number, in the format of X:X:X:X:X:X:X:X. |
| peer-ipv6 peerIPv6 |
Specifies an IPv6 address for a remote VTEP. |
The address is a 32-digit hexadecimal number, in the format of X:X:X:X:X:X:X:X. |
Usage Scenario
ter the source NVE on a VXLAN tunnel receives broadcast, unknown unicast, and multicast (BUM) packets, the local VTEP sends a copy of the BUM packets to every VTEP in the ingress replication list with the same VNI. To reduce the volume of broadcast traffic, run the mac-address static bridge-domain command to configure a static MAC entry for forwarding traffic. This configuration also prevents unauthorized data access, enhancing network security.
<HUAWEI> system-view [~HUAWEI] bridge-domain 10 [*HUAWEI-bd10] vxlan vni 5000 [*HUAWEI-bd10] quit [*HUAWEI] interface nve 1 [*HUAWEI-Nve1] source 2001:db8:1::1 [*HUAWEI-Nve1] vni 5000 head-end peer-list 2001:db8:1::2 [*HUAWEI-Nve1] quit [*HUAWEI] mac-address static aa-fcc-12 bridge-domain 10 source-ipv6 2001:db8:1::1 peer-ipv6 2001:db8:1::2 vni 5000
<HUAWEI> system-view [~HUAWEI] bridge-domain 10 [*HUAWEI-bd10] vxlan vni 5000 [*HUAWEI-bd10] quit [*HUAWEI] interface nve 1 [*HUAWEI-Nve1] source 1.1.1.1 [*HUAWEI-Nve1] vni 5000 head-end peer-list 2.2.2.2 [*HUAWEI-Nve1] quit [*HUAWEI] mac-address static aa-fcc-12 bridge-domain 10 source 1.1.1.1 peer 2.2.2.2 vni 5000