On a network with unchanged users or a device is connected to an important server, to prevent hacker attacks on devices or the server, a static MAC address can be configured and added to a MAC address table.
Procedure
- Run system-view
The system view is displayed.
- Run mac-address static mac-address { interface-type interface-number | interface-name bridge-domain bd-id { default | untag | vid pe-vid [ ce-vid { ce-vid | default } ] }
A static MAC address entry based on a bridge domain is configured. The following parameters can be configured in this command as required:
- default: enables default encapsulation on the EVC Layer 2 sub-interface.
- vid pe-vid: enables dot1q encapsulation on the EVC Layer 2 sub-interface.
- vid pe-vid ce-vid { ce-vid | default }: enables QinQ encapsulation on the EVC Layer 2 sub-interface.
- untag: enables untagged encapsulation on the EVC Layer 2 sub-interface.
- Run commit
The configuration is committed.