Defense measures and specific configurations for MAC address flooding attacks

　　MAC address flooding attack refers to the MAC address Learning mechanism of the switch, the attacker constantly refreshes the Mac address, fills the switch's mac The Address Table crashes so that the switch has to use the broadcast packet to get other people's message information.

defense measures and specific configurations for MAC address flooding attacks

Limit the number of ports that are connected to the access switch.

For example, this port of the switch can be set up to learn ten mac addresses, to stop learning over ten mac addresses, Discard the later mac.

　　

The specific code is as follows:

[HUAWEI-ETHERNET0/0/1] port-security Enable
[HUAWEI-ETHERNET0/0/1] port-security mac-address Sticky
[HUAWEI-ETHERNET0/0/1] port-security protect-action Protect
[HUAWEI-ETHERNET0/0/1] port-security max-mac-num x

X refers to the number of MAC addresses that can be set for learning.

Defense measures and specific configurations for MAC address flooding attacks