You can bind an ip address to a mac address on a layer-3 device. However, if the number of devices is large, the performance of the device is at the cost. Sometimes attacks and network faults may cause more trouble. In addition, the price of three-tier equipment is not affordable for all enterprises.
How to bind a MAC address to a low-end product on the second layer to prevent the impact of ARP on the network.
Step 1: Enter the port to set e0/8 port mac learning count to 0 Red words to commands and parameters that must be manually entered)
[Huawei S2126-EI]int e 0/8 [Huawei S2126-EI-Ethernet0/8]mac-address max-mac-count 0 [Huawei S2126-EI-Ethernet0/8]q
|
Step 2: bind 0015-58aa-3650 to the e0/8 port. Only the PC bound to the mac can access the Internet through this port, and e0/8 belongs to vlan 2004.
[Huawei S2126-EI]mac static 0015-58aa-3650 int e0/8 vlan 2004
|
Last step: Save the Configuration
[Huawei S2126-EI]q save This will save the configuration in the flash memory. The switch configurations will be written to flash. Are you sure?[Y/N]y
|
For H3C low-end switches, other steps are the same, but the first step is a little different.
Step 1: Go to Port 1 and set the mac Number of port e1/0/8 to 1 and set the red word to the commands and parameters that must be manually entered)
[H3C S2126-EI] int e 1/0/8 [H3C S2126-EI-Ethernet1/0/8] mac-address max-mac-count 1 [H3C S2126-EI-Ethernet1/0/8] q press a carriage return to get it done
|
Step 2: bind 0015-58aa-3650 to the e1/0/8 port. Only the PC bound to the mac can access the Internet through this port, and e1/0/8 belongs to vlan 2004.
[H3C S2126-EI]mac static 0015-58aa-3650 int e1/0/8 vlan 2004
|
Last step: Save the Configuration
[H3C S2126-EI]q save This will save the configuration in the flash memory. The switch configurations will be written to flash. Are you sure?[Y/N]y
|
Remember to press ENTER twice.
It feels good to use, but it cannot be executed in batches. If you want to bind multiple MAC ports at a time, then it's okay, And the PCs below will be disconnected; it may be because the vswitch is too low-end. You can only honestly bind it one by one.
Note: The order of the two commands cannot be reversed unless the port is not connected to a PC.
- · Huawei 3Com launches the second-layer switch product S3100