7种常用的MAC地址配置方法你会几种

7种常用的MAC地址配置方法，你会几种？前言MAC（MediaAccessControl）地址用来定义网络设备的位置。MAC地址由48比特长、12位的16进制数字组成，其中从左到右开始，0到23bit是厂商向IETF等机构申请用来标识厂商的代码，24到47bit由厂商自行分派，是各个厂商制造的所有网卡的一个唯一编号。MAC地址可以分为3种类型：物理MAC地址：这种类型的MAC地址唯一的标识了以太网上的一个终端，该地址为全球唯一的硬件地址；广播MAC地址：全1的MAC地址为广播地址（FF-FF-FF-FF-FF-FF），用来表示LAN上的所有终端设备；组播MAC地址：除广播地址外，第8bit为1的MAC地址为组播MAC地址（例如01-00-00-00-00-00），用来代表LAN上的一组终端。其中以01-80-c2开头的组播MAC地址叫BPDUMAC，一般作为协议报文的目的MAC地址标示某种协议报文。本文主要介绍MAC地址相关的7种配置示例。01

配置静态MAC地址示例组网需求如图1所示，用户主机PC的MAC地址为0002-0002-0002，与Switch的GE1/0/1接口相连。Server服务器的MAC地址为0004-0004-0004，与Switch的GE1/0/2接口相连。用户主机PC和Server服务器均在VLAN2内通信。为防止MAC地址攻击，在Switch的MAC表中为用户主机添加一条静态表项。为防止非法用户假冒Server的MAC地址窃取重要用户信息，在Switch上为Server服务器添加一条静态MAC地址表项。图1

配置静态MAC表组网图配置思路采用如下的思路配置MAC表：创建VLAN，并将接口加入到VLAN中，实现二层转发功能。添加静态MAC地址表项，防止非法用户攻击。操作步骤添加静态MAC地址表项#创建VLAN2，将接口GigabitEthernet1/0/1、GigabitEthernet1/0/2加入VLAN2。<HUAWEI>system-view

[HUAWEI]sysnameSwitch

[Switch]vlan2

[Switch-vlan2]quit

[Switch]interfacegigabitethernet1/0/1

[Switch-GigabitEthernet1/0/1]portlink-typeaccess

[Switch-GigabitEthernet1/0/1]portdefaultvlan2

[Switch-GigabitEthernet1/0/1]quit

[Switch]interfacegigabitethernet1/0/2

[Switch-GigabitEthernet1/0/2]portlink-typeaccess

[Switch-GigabitEthernet1/0/2]portdefaultvlan2

[Switch-GigabitEthernet1/0/2]quit#配置静态MAC地址表项。[Switch]mac-addressstatic2-2-2GigabitEthernet1/0/1vlan2

[Switch]mac-addressstatic4-4-4GigabitEthernet1/0/2vlan2验证配置结果#在任意视图下执行displaymac-addressstaticvlan2命令，查看静态MAC表是否添加成功。[Switch]displaymac-addressstaticvlan2

-------------------------------------------------------------------------------

MACAddressVLAN/VSI/BDLearned-FromType

-------------------------------------------------------------------------------

0002-0002-00022/-/-GE1/0/1static

0004-0004-00042/-/-GE1/0/2static

-------------------------------------------------------------------------------

Totalitemsdisplayed=2配置文件Switch的配置文件#

sysnameSwitch

#

vlanbatch2

#

interfaceGigabitEthernet1/0/1

portlink-typeaccess

portdefaultvlan2

#

interfaceGigabitEthernet1/0/2

portlink-typeaccess

portdefaultvlan2

#

mac-addressstatic0002-0002-0002GigabitEthernet1/0/1vlan2

mac-addressstatic0004-0004-0004GigabitEthernet1/0/2vlan2

#

return02配置黑洞MAC地址示例组网需求如图2所示，交换机Switch收到一个非法用户的访问，非法用户的MAC地址为0005-0005-0005，所属VLAN为VLAN3。通过指定该MAC地址为黑洞MAC，实现非法用户的过滤。图2

配置黑洞MAC表组网图配置思路采用如下的思路配置MAC表：创建VLAN，实现二层转发功能。添加黑洞MAC表，防止MAC地址攻击。操作步骤添加黑洞MAC地址表项#创建VLAN3。<HUAWEI>system-view

[HUAWEI]sysnameSwitch

[Switch]vlan3

[Switch-vlan3]quit#添加黑洞MAC地址表项。[Switch]mac-addressblackhole0005-0005-0005vlan3验证配置结果#在任意视图下执行displaymac-addressblackhole命令，查看黑洞MAC表是否添加成功。[Switch]displaymac-addressblackhole

-------------------------------------------------------------------------------

MACAddressVLAN/VSI/BDLearned-FromType

-------------------------------------------------------------------------------

0005-0005-00053/-/--blackhole

-------------------------------------------------------------------------------

Totalitemsdisplayed=1配置文件Switch的配置文件#

sysnameSwitch

#

vlanbatch3

#

mac-addressblackhole0005-0005-0005vlan3

#

return03配置基于接口的MAC地址学习限制示例组网需求如图3所示，用户网络1和用户网络2通过LSW与Switch相连，Switch连接LSW的接口为GE1/0/1。用户网络1和用户网络2分别属于VLAN10和VLAN20。在Switch上，为了控制接入用户数量，可以基于接口GE1/0/1配置MAC地址学习限制功能。图3

配置基于接口的MAC地址学习限制数组网图配置思路采用如下的思路配置基于接口的MAC地址学习限制：创建VLAN，并将接口加入到VLAN中，实现二层转发功能。配置基于接口的MAC地址学习限制，控制接入用户数量。操作步骤配置MAC地址学习限制#将GigabitEthernet1/0/1加入VLAN10和VLAN20。<HUAWEI>system-view

[HUAWEI]sysnameSwitch

[Switch]vlanbatch1020

[Switch]interfacegigabitethernet1/0/1

[Switch-GigabitEthernet1/0/1]portlink-typehybrid

[Switch-GigabitEthernet1/0/1]porthybridtaggedvlan1020#在接口GigabitEthernet1/0/1上配置MAC地址学习限制规则：最多可以学习100个MAC地址，超过最大MAC地址学习数量的报文丢弃，并进行告警提示。[Switch-GigabitEthernet1/0/1]mac-limitmaximum100actiondiscardalarmenable

[Switch-GigabitEthernet1/0/1]return验证配置结果#在任意视图下执行displaymac-limit命令，查看MAC地址学习限制规则是否配置成功。<Switch>displaymac-limit

MAClimitisenabled

TotalMAClimitrulecount:1

PORTVLAN/VSISLOTMaximumRate(ms)ActionAlarm

----------------------------------------------------------------------------

GE1/0/1--100-discardenable配置文件以下仅给出Switch的配置文件。#

sysnameSwitch

#

vlanbatch1020

#

interfaceGigabitEthernet1/0/1

portlink-typehybrid

porthybridtaggedvlan1020

mac-limitmaximum100

#

return04

配置基于VLAN的MAC地址学习限制示例组网需求如图4所示，用户网络1通过LSW1与Switch相连，Switch的接口为GE1/0/1。用户网络2通过LSW2与Switch相连，Switch的接口为GE1/0/2。GE1/0/1、GE1/0/2同属于VLAN2。为控制接入用户数，对VLAN2进行MAC地址学习的限制。图4

配置基于VLAN的MAC地址学习限制组网图配置思路采用如下的思路配置基于VLAN的MAC地址学习限制：创建VLAN，并将接口加入到VLAN中，实现二层转发功能。配置VLAN的MAC地址学习限制，实现防止MAC地址攻击，控制接入用户数量。操作步骤配置MAC地址学习限制#将GigabitEthernet1/0/1、GigabitEthernet1/0/2加入VLAN2。<HUAWEI>system-view

[HUAWEI]sysnameSwitch

[Switch]vlan2

[Switch-vlan2]quit

[Switch]interfacegigabitethernet1/0/1

[Switch-GigabitEthernet1/0/1]portlink-typehybrid

[Switch-GigabitEthernet1/0/1]porthybridpvidvlan2

[Switch-GigabitEthernet1/0/1]porthybriduntaggedvlan2

[Switch-GigabitEthernet1/0/1]quit

[Switch]interfacegigabitethernet1/0/2

[Switch-GigabitEthernet1/0/2]portlink-typehybrid

[Switch-GigabitEthernet1/0/2]porthybridpvidvlan2

[Switch-GigabitEthernet1/0/2]porthybriduntaggedvlan2

[Switch-GigabitEthernet1/0/2]quit#在VLAN2上配置MAC地址学习限制规则：最多可以学习100个MAC地址，超过最大MAC地址学习数量的报文继续转发但不加入MAC地址表，并进行告警提示。[Switch]vlan2

[Switch-vlan2]mac-limitmaximum100actionforwardalarmenable

[Switch-vlan2]return验证配置结果#在任意视图下执行displaymac-limit命令，查看MAC地址学习限制规则是否配置成功。<Switch>displaymac-limit

MAClimitisenabled

TotalMAClimitrulecount:1

PORTVLAN/VSISLOTMaximumRate(ms)ActionAlarm

----------------------------------------------------------------------------

-2-100-forwardenable配置文件以下仅给出Switch的配置文件。#

sysnameSwitch

#

vlanbatch2

#

vlan2

mac-limitmaximum100actionforward

#

interfaceGigabitEthernet1/0/1

portlink-typehybrid

porthybridpvidvlan2

porthybriduntaggedvlan2

#

interfaceGigabitEthernet1/0/2

portlink-typehybrid

porthybridpvidvlan2

porthybriduntaggedvlan2

#

return05配置基于VSI的MAC地址学习限制示例组网需求如图5，某企业机构，自建骨干网。为了保证骨干网的安全，在PE设备上通过配置基于VSI的MAC地址学习限制功能，实现对CE的接入控制。图5

配置基于VSI的MAC地址学习限制组网图配置思路采用如下的思路配置基于VSI的MAC地址学习限制：在骨干网上配置路由协议实现互通。在PE之间建立远端LDP会话。在PE间建立传输业务数据所使用的隧道。在PE上使能MPLSL2VPN。在PE上创建VSI，指定信令为LDP。在PE设备基于VSI配置MAC地址学习限制，完成对CE的接入控制。操作步骤配置各接口所属的VLAN以及相关接口IP地址#配置CE1。<HUAWEI>system-view

[HUAWEI]sysnameCE1

[CE1]vlan10

[CE1-vlan10]quit

[CE1]interfacevlanif10

[CE1-Vlanif10]ipaddress

[CE1-Vlanif10]quit

[CE1]interfacegigabitethernet1/0/0

[CE1-GigabitEthernet1/0/0]portlink-typetrunk

[CE1-GigabitEthernet1/0/0]porttrunkallow-passvlan10

[CE1-GigabitEthernet1/0/0]quit#配置CE2。<HUAWEI>system-view

[HUAWEI]sysnameCE2

[CE2]vlan40

[CE2-vlan40]quit

[CE2]interfacevlanif40

[CE2-Vlanif40]ipaddress

[CE2-Vlanif40]quit

[CE2]interfacegigabitethernet1/0/0

[CE2-GigabitEthernet1/0/0]portlink-typetrunk

[CE2-GigabitEthernet1/0/0]porttrunkallow-passvlan40

[CE2-GigabitEthernet1/0/0]quit#配置PE1。<HUAWEI>system-view

[HUAWEI]sysnamePE1

[PE1]vlanbatch1020

[PE1]interfacevlanif20

[PE1-Vlanif20]ipaddress

[PE1-Vlanif20]quit

[PE1]interfacegigabitethernet1/0/0

[PE1-GigabitEthernet1/0/0]portlink-typetrunk

[PE1-GigabitEthernet1/0/0]porttrunkallow-passvlan10

[PE1-GigabitEthernet1/0/0]quit

[PE1]interfacegigabitethernet2/0/0

[PE1-GigabitEthernet2/0/0]portlink-typetrunk

[PE1-GigabitEthernet2/0/0]porttrunkallow-passvlan20

[PE1-GigabitEthernet2/0/0]quit#配置P。<HUAWEI>system-view

[HUAWEI]sysnameP

[P]vlanbatch2030

[P]interfacevlanif20

[P-Vlanif20]ipaddress

[P-Vlanif20]quit

[P]interfacevlanif30

[P-Vlanif30]ipaddress

[P-Vlanif30]quit

[P]interfacegigabitethernet1/0/0

[P-GigabitEthernet1/0/0]portlink-typetrunk

[P-GigabitEthernet1/0/0]porttrunkallow-passvlan20

[P-GigabitEthernet1/0/0]quit

[P]interfacegigabitethernet2/0/0

[P-GigabitEthernet2/0/0]portlink-typetrunk

[P-GigabitEthernet2/0/0]porttrunkallow-passvlan30

[P-GigabitEthernet2/0/0]quit#配置PE2。<HUAWEI>system-view

[HUAWEI]sysnamePE2

[PE2]vlanbatch3040

[PE2]interfacevlanif30

[PE2-Vlanif30]ipaddress

[PE2-Vlanif30]quit

[PE2]interfacegigabitethernet1/0/0

[PE2-GigabitEthernet1/0/0]portlink-typetrunk

[PE2-GigabitEthernet1/0/0]porttrunkallow-passvlan30

[PE2-GigabitEthernet1/0/0]quit

[PE2]interfacegigabitethernet2/0/0

[PE2-GigabitEthernet2/0/0]portlink-typetrunk

[PE2-GigabitEthernet2/0/0]porttrunkallow-passvlan40

[PE2-GigabitEthernet2/0/0]quit配置IGP，本例中使用OSPF。配置OSPF时，注意需要发布PE1、P和PE2的32位Loopback接口地址（LSR-ID）。#配置PE1。[PE1]routerid

[PE1]interfaceloopback1

[PE1-LoopBack1]ipaddress32

[PE1-LoopBack1]quit

[PE1]ospf1

[PE1-ospf-1]area0

[PE1-ospf-1-area-]network

[PE1-ospf-1-area-]network55

[PE1-ospf-1-area-]quit

[PE1-ospf-1]quit#配置P。[P]routerid

[P]interfaceloopback1

[P-LoopBack1]ipaddress32

[P-LoopBack1]quit

[P]ospf1

[P-ospf-1]area0

[P-ospf-1-area-]network

[P-ospf-1-area-]network55

[P-ospf-1-area-]network55

[P-ospf-1-area-]quit

[P-ospf-1]quit#配置PE2。[PE2]routerid

[PE2]interfaceloopback1

[PE2-LoopBack1]ipaddress32

[PE2-LoopBack1]quit

[PE2]ospf1

[PE2-ospf-1]area0

[PE2-ospf-1-area-]network

[PE2-ospf-1-area-]network55

[PE2-ospf-1-area-]quit

[PE2-ospf-1]quit配置完成后，在PE1、P和PE2上执行displayiprouting-table命令可以看到已学到彼此的路由。以PE1的显示为例：[PE1]displayiprouting-table

RouteFlags:R-relay,D-downloadtofib,T-tovpn-instance

------------------------------------------------------------------------------

RoutingTables:Public

Destinations:8Routes:8

Destination/MaskProtoPreCostFlagsNextHopInterface

/32Direct00DLoopBack1

/32OSPF101DVlanif20

/32OSPF102DVlanif20

/24Direct00DVlanif20

/32Direct00DVlanif20

/24OSPF102DVlanif20

/8Direct00DInLoopBack0

/32Direct00DInLoopBack0配置MPLS基本能力和LDP#配置PE1[PE1]mplslsr-id

[PE1]mpls

[PE1-mpls]quit

[PE1]mplsldp

[PE1-mpls-ldp]quit

[PE1]interfacevlanif20

[PE1-Vlanif20]mpls

[PE1-Vlanif20]mplsldp

[PE1-Vlanif20]quit#配置P[P]mplslsr-id

[P]mpls

[P-mpls]quit

[P]mplsldp

[P-mpls-ldp]quit

[P]interfacevlanif20

[P-Vlanif20]mpls

[P-Vlanif20]mplsldp

[P-Vlanif20]quit

[P]interfacevlanif30

[P-Vlanif30]mpls

[P-Vlanif30]mplsldp

[P-Vlanif30]quit#配置PE2[PE2]mplslsr-id

[PE2]mpls

[PE2-mpls]quit

[PE2]mplsldp

[PE2-mpls-ldp]quit

[PE2]interfacevlanif30

[PE2-Vlanif30]mpls

[PE2-Vlanif30]mplsldp

[PE2-Vlanif30]quit配置完成后，在PE1、P和PE2上执行displaymplsldpsession命令可以看到PE1和P之间或PE2和P之间的对等体的Status项为“Operational”，即对等体关系已建立。执行displaymplslsp命令可以看到LSP的建立情况。以PE1的显示为例：[PE1]displaymplsldpsession

LDPSession(s)inPublicNetwork

Codes:LAM(LabelAdvertisementMode),SsnAgeUnit(DDDD:HH:MM)

A'*'beforeasessionmeansthesessionisbeingdeleted.

------------------------------------------------------------------------------

PeerIDStatusLAMSsnRoleSsnAgeKASent/Rcv

------------------------------------------------------------------------------

:0OperationalDUPassive000:15:293717/3717

------------------------------------------------------------------------------

TOTAL:1session(s)Found.在PE之间建立远端LDP会话#配置PE1。[PE1]mplsldpremote-peer

[PE1-mpls-ldp-remote-]remote-ip

[PE1-mpls-ldp-remote-]quit#配置PE2。[PE2]mplsldpremote-peer

[PE2-mpls-ldp-remote-]remote-ip

[PE2-mpls-ldp-remote-]quit配置完成后，在PE1或PE2上执行displaymplsldpsession命令可以看到PE1和PE2之间的对等体的Status项为“Operational”，即远端对等体关系已建立。在PE上使能MPLSL2VPN#配置PE1。[PE1]mplsl2vpn

[PE1-l2vpn]quit#配置PE2。[PE2]mplsl2vpn

[PE2-l2vpn]quit在PE上配置VSI#配置PE1。[PE1]vsia2static

[PE1-vsi-a2]pwsignalldp

[PE1-vsi-a2-ldp]vsi-id2

[PE1-vsi-a2-ldp]peer

[PE1-vsi-a2-ldp]quit

[PE1-vsi-a2]quit#配置PE2。[PE2]vsia2static

[PE2-vsi-a2]pwsignalldp

[PE2-vsi-a2-ldp]vsi-id2

[PE2-vsi-a2-ldp]peer

[PE2-vsi-a2-ldp]quit

[PE2-vsi-a2]quit在PE上配置VSI与接口的绑定#配置PE1。[PE1]interfacevlanif10

[PE1-Vlanif10]l2bindingvsia2

[PE1-Vlanif10]quit#配置PE2。[PE2]interfacevlanif40

[PE2-Vlanif40]l2bindingvsia2

[PE2-Vlanif40]quit验证配置结果完成上述配置后，在PE1上执行displayvsinamea2verbose命令，可以看到名字为a2的VSI建立了一条PW到PE2，VSI状态为UP。[PE1]displayvsinamea2verbose

***VSIName:a2

AdministratorVSI:no

IsolateSpoken:disable

VSIIndex:0

PWSignaling:ldp

MemberDiscoveryStyle:static

PWMACLearnStyle:unqualify

EncapsulationType:vlan

MTU:1500

DiffservMode:uniform

MplsExp:--

DomainId:255

DomainName:

IgnoreAcState:disable

P2PVSI:disable

CreateTime:0days,0hours,5minutes,1seconds

VSIState:up

VSIID:2

*PeerRouterID:

Negotiation-vc-id:2

primaryorsecondary:primary

ignore-standby-state:no

VCLabel:4098

PeerType:dynamic

Session:up

TunnelID:0x1

BroadcastTunnelID:0x1

BroadBackupTunnelID:0x0

CKey:2

NKey:1

StpEnable:0

PwIndex:0

ControlWord:disable

InterfaceName:Vlanif10

State:up

AccessPort:false

LastUpTime:2010/12/3011:31:18

TotalUpTime:0days,0hours,1minutes,35seconds

**PWInformation:

*PeerIpAddress:

PWState:up

LocalVCLabel:4098

RemoteVCLabel:4098

RemoteControlWord:disable

PWType:label

LocalVCCV:alertlsp-pingbfd

RemoteVCCV:alertlsp-pingbfd

TunnelID:0x1

BroadcastTunnelID:0x1

BroadBackupTunnelID:0x0

Ckey:0x2

Nkey:0x1

MainPWToken:0x1

SlavePWToken:0x0

TnlType:LSP

OutInterface:Vlanif20

BackupOutInterface:

StpEnable:0

PWLastUpTime:2010/12/3011:32:03

PWTotalUpTime:0days,0hours,1minutes,35seconds在CE1（）上能够ping通CE2（）。[CE1]ping

PING:56databytes,pressCTRL_Ctobreak

Replyfrom:bytes=56Sequence=1ttl=255time=90ms

Replyfrom:bytes=56Sequence=2ttl=255time=77ms

Replyfrom:bytes=56Sequence=3ttl=255time=34ms

Replyfrom:bytes=56Sequence=4ttl=255time=46ms

Replyfrom:bytes=56Sequence=5ttl=255time=94ms

---pingstatistics---

5packet(s)transmitted

5packet(s)received

0.00%packetloss

round-tripmin/avg/max=34/68/94ms在PE1的VSI上配置MAC地址学习限制#在VSI上配置MAC地址学习限制规则：最多可以学习300个MAC地址，超过最大MAC地址学习数量的报文直接丢弃并进行告警提示。[PE1]vsia2static

[PE1-vsi-a2]mac-limitmaximum300actiondiscardalarmenable

[PE1-vsi-a2]return验证配置结果#在任意视图下执行displaymac-limit命令，查看MAC地址学习限制规则是否配置成功。<PE1>displaymac-limit

MAClimitisenabled

TotalMAClimitrulecount:1

PORTVLAN/VSISLOTMaximumRate(ms)ActionAlarm

----------------------------------------------------------------------------

-a2-300-discardenable配置文件CE1的配置文件#

sysnameCE1

#

vlanbatch10

#

interfaceVlanif10

ipaddress

#

interfaceGigabitEthernet1/0/0

portlink-typetrunk

porttrunkallow-passvlan10

#

returnCE2的配置文件#

sysnameCE2

#

vlanbatch40

#

interfaceVlanif40

ipaddress

#

interfaceGigabitEthernet1/0/0

portlink-typetrunk

porttrunkallow-passvlan40

#

returnPE1的配置文件#

sysnamePE1

#

routerid

#

vlanbatch1020

#

mplslsr-id

mpls

#

mplsl2vpn

#

vsia2static

mac-limitmaximum300

pwsignalldp

vsi-id2

peer

#

mplsldp

#

mplsldpremote-peer

remote-ip

#

interfaceVlanif10

l2bindingvsia2

#

interfaceVlanif20

ipaddress

mpls

mplsldp

#

interfaceGigabitEthernet1/0/0

portlink-typetrunk

porttrunkallow-passvlan10

#

interfaceGigabitEthernet2/0/0

portlink-typetrunk

porttrunkallow-passvlan20

#

interfaceLoopBack1

ipaddress55

#

ospf1

area

network

network55

#

returnP的配置文件#

sysnameP

#

routerid

#

vlanbatch2030

#

mplslsr-id

mpls

#

mplsldp

#

interfaceVlanif20

ipaddress

mpls

mplsldp

#

interfaceVlanif30

ipaddress

mpls

mplsldp

#

interfaceGigabitEthernet1/0/0

portlink-typetrunk

porttrunkallow-passvlan20

#

interfaceGigabitEthernet2/0/0

portlink-typetrunk

porttrunkallow-passvlan30

#

interfaceLoopBack1

ipaddress55

#

ospf1

area

network

network55

network55

#

returnPE2的配置文件#

sysnamePE2

#

routerid

#

vlanbatch3040

#

mplslsr-id

mpls

#

mplsl2vpn

#

vsia2static

pwsignalldp

vsi-id2

peer

#

mplsldp

#

mplsldpremote-peer

remote-ip

#

interfaceVlanif30

ipaddress

mpls

mplsldp

#

interfaceVlanif40

l2bindingvsia2

#

interfaceGigabitEthernet1/0/0

portlink-typetrunk

porttrunkallow-passvlan30

#

interfaceGigabitEthernet2/0/0

portlink-typetrunk

porttrunkallow-passvlan40

#

interfaceLoopBack1

ipaddress55

#

ospf1

area

network

network55

#

return06

配置MAC防漂移示例组网需求某企业网络中，用户需要访问企业的服务器。如果某些非法用户从其他接口假冒服务器的MAC地址发送报文，则服务器的MAC地址将在其他接口学习到。这样用户发往服务器的报文就会发往非法用户，不仅会导致用户与服务器不能正常通信，还会导致一些重要用户信息被窃取。如图6所示，为了提高服务器安全性，防止被非法用户攻击，可配置MAC防漂移功能。图6

配置MAC防漂移组网图配置思路采用如下的思路配置MAC防漂移：创建VLAN，并将接口加入到VLAN中，实现二层转发功能。在服务器连接的接口上配置MAC防漂移功能，实现MAC地址防漂移。操作步骤创建VLAN，并将接口加入到VLAN中。#将GigabitEthernet1/0/1、GigabitEthernet1/0/2加入VLAN10。<HUAWEI>system-view

[HUAWEI]sysnameSwitch

[Switch]vlan10

[Switch-vlan10]quit

[Switch]interfacegigabitethernet1/0/2

[Switch-GigabitEthernet1/0/2]portlink-typetrunk

[Switch-GigabitEthernet1/0/2]porttrunkallow-passvlan10

[Switch-GigabitEthernet1/0/2]quit

[Switch]interfacegigabitethernet1/0/1

[Switch-GigabitEthernet1/0/1]portlink-typehybrid

[Switch-GigabitEthernet1/0/1]porthybridpvidvlan10

[Switch-GigabitEthernet1/0/1]porthybriduntaggedvlan10#在GigabitEthernet1/0/1上配置MAC地址学习的优先级为2。[Switch-GigabitEthernet1/0/1]mac-learningpriority2

[Switch-GigabitEthernet1/0/1]quit验证配置结果#在任意视图下执行displaycurrent-configuration命令，查看接口MAC地址学习的优先级配置是否正确。[Switch]displaycurrent-configurationinterfacegigabitethernet1/0/1

#

interfaceGigabitEthernet1/0/1

portlink-typehybrid

porthybridpvidvlan10

porthybriduntaggedvlan10

mac-learningpriority2

#

return配置文件Switch的配置文件#

sysnameSwitch

#

vlanbatch10

#

interfaceGigabitEthernet1/0/1

portlink-typehybrid

porthybridpvidvlan10

porthybriduntaggedvlan10

mac-learningpriority2

#

inte