Configuring VSI-based MAC Address Management

VPLS forwards data according to MAC entries. In most cases, MAC address learning is automatically performed among devices. To protect services against attacks and faults, VPLS provides an additional set of MAC control mechanisms.

Usage Scenario

The NetEngine 8000 F supports VSI-based MAC address management, including:

Configuring MAC address learning
Configuring static MAC address entries
Configuring MAC address safety

Pre-configuration Tasks

Before configuring VSI-based MAC address management, configure LDP VPLS.

Enabling MAC Address Learning: Packets can be forwarded according to MAC addresses only after MAC address learning is enabled.

Configuring MAC Address Entries: This section describes how to configure static and static black-hole MAC address entries. After a static MAC address entry is configured, the packet with the specified destination MAC address is forwarded from the specified interface. This process prevents a device from being attacked by forged MAC addresses. After a black-hole MAC address entry is configured, the packet with a specific destination MAC address is discarded. This process prevents hackers from using MAC addresses to attack networks.

Configuring MAC Address Safety: You can limit the number of MAC addresses to be learned and the rate of MAC address learning and specify the action to be taken when MAC address learning exceeds the limit.

Configuring the Function of Clearing the MAC Addresses of Specific PWs: After you configure the function, a VSI deletes the MAC address of the PW carried in a received MAC Withdraw message carrying 0x404 TLV but retains the MAC addresses of the other PWs and AC interfaces.

Configuring Delayed Resending of a MAC-Withdraw Message: This section describes how to configure delayed resending of a MAC-Withdraw message. In case that the VRRP status changes to backup, this configuration allows a device to resend a MAC-Withdraw message to a peer PE after a specified delay.

Verifying the Configuration of VSI-based MAC Address Management: After configuring VSI-based MAC address management, check the set limits of MAC address learning and the aging time of MAC address entries.