HP HP ProCurve Series 6600 User manual
HP 6600/HSR6600 Routers
Layer 2 - LAN Switching
Configuration Guide
Part number: 5998-1501
Software version: A6602-CMW520-R3103
A6600-CMW520-R3102-RPE
A6600-CMW520-R3102-RSE
HSR6602_MCP-CMW520-R3102
Document version: 6PW103-20130628
Legal and notice information
© Copyright 2013 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or
use of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained
herein.
i
Contents
Configuring the MAC address table ·························································································································· 1
Overview············································································································································································1
How a MAC address table entry is created··········································································································1
Types of MAC address table entries ······················································································································2
Configuring static, dynamic, and blackhole MAC address table entries ···································································2
Adding or modifying a static or dynamic MAC address table entry in system view ·······································2
Adding or modifying a static or dynamic MAC address table entry in interface view····································3
Configuring a blackhole MAC address entry················································································································3
Disabling MAC address learning····································································································································3
Disabling global MAC address learning···············································································································3
Disabling MAC address learning on ports············································································································4
Disabling MAC address learning on a VLAN·······································································································4
Configuring the aging timer for dynamic MAC address entries··················································································4
Configuring the MAC learning limit on ports·················································································································5
Displaying and maintaining MAC address tables ········································································································5
MAC address table configuration example ···················································································································6
Network requirements··············································································································································6
Configuration procedure ·········································································································································6
Configuring MAC Information ···································································································································· 8
Configuration guidelines ··················································································································································8
Enabling MAC Information globally ·······························································································································8
Enabling MAC Information on an interface ···················································································································8
Configuring MAC Information mode ······························································································································9
Configuring the interval for sending syslog or trap messages·····················································································9
Configuring the MAC Information queue length ···········································································································9
MAC Information configuration example·······················································································································9
Network requirements··············································································································································9
Configuration procedure ······································································································································ 10
Configuring Ethernet link aggregation ·····················································································································11
Overview········································································································································································· 11
Basic concepts ······················································································································································· 11
Aggregating links in static mode························································································································· 14
Aggregating links in dynamic mode ··················································································································· 15
Load-sharing criteria for link aggregation groups ····························································································· 17
Configuration restrictions and guidelines···················································································································· 17
Ethernet link aggregation configuration task list········································································································· 17
Configuring an aggregation group ····························································································································· 18
Configuration guidelines ······································································································································ 18
Configuring a Layer 2 static aggregation group······························································································· 18
Configuring a Layer 3 static aggregation group······························································································· 19
Configuring a Layer 2 dynamic aggregation group ························································································· 20
Configuring a Layer 3 dynamic aggregation group ························································································· 21
Configuring an aggregate interface ···························································································································· 22
Configuring the description of an aggregate interface or subinterface·························································· 22
Configuring the MTU of a Layer 3 aggregate interface or subinterface························································· 23
Specifying a card to process and forward traffic for a Layer 3 aggregate interface ··································· 23
Enabling link state traps for an aggregate interface ························································································· 24
Setting the expected bandwidth for an aggregate interface············································································ 24
ii
Shutting down an aggregate interface ··············································································································· 25
Restoring the default settings for an aggregate interface ················································································· 25
Configuring load-sharing criteria for link aggregation groups················································································· 26
Configuring the global link-aggregation load sharing criteria········································································· 26
Configuring load-sharing criteria for an aggregation group ··········································································· 26
Displaying and maintaining Ethernet link aggregation ····························································································· 27
Ethernet link aggregation configuration examples····································································································· 27
Layer 2 static aggregation configuration example···························································································· 28
Layer 2 dynamic aggregation configuration example······················································································ 29
Layer 2 aggregation load sharing configuration example··············································································· 31
Layer 3 static aggregation configuration example···························································································· 34
Layer 3 dynamic aggregation configuration example······················································································ 35
Layer 3 aggregation load sharing configuration example··············································································· 36
Configuring port isolation··········································································································································39
Overview········································································································································································· 39
Assigning ports to the isolation group ························································································································· 39
Displaying and maintaining the isolation group ········································································································ 39
Port isolation configuration example···························································································································· 40
Network requirements··········································································································································· 40
Configuration procedure ······································································································································ 40
Configuring spanning tree protocols ························································································································41
STP ··················································································································································································· 41
STP protocol packets ············································································································································· 41
Basic concepts in STP············································································································································ 42
STP algorithm ························································································································································· 43
RSTP················································································································································································· 48
MSTP················································································································································································ 48
STP and RSTP limitations······································································································································· 48
MSTP features ························································································································································ 48
MSTP basic concepts ············································································································································ 48
How MSTP works ·················································································································································· 52
Implementation of MSTP on devices···················································································································· 52
Protocols and standards ················································································································································ 53
Spanning tree configuration task lists ·························································································································· 53
Configuration prerequisites ·································································································································· 53
Configuration restrictions and guidelines ··········································································································· 53
STP configuration task list····································································································································· 54
RSTP configuration task list··································································································································· 54
MSTP configuration task list ································································································································· 55
Setting the spanning tree mode···································································································································· 57
Configuring an MST region ·········································································································································· 57
Configuring the root bridge or a secondary root bridge ·························································································· 58
Configuring the current device as the root bridge of a specific spanning tree·············································· 58
Configuring the current device as a secondary root bridge of a specific spanning tree······························ 59
Configuring the device priority····································································································································· 59
Configuring the maximum hops of an MST region ···································································································· 59
Configuring the network diameter of a switched network························································································· 60
Configuring spanning tree timers································································································································· 60
Configuration guidelines ······································································································································ 61
Configuration procedure ······································································································································ 61
Configuring the timeout factor ······································································································································ 61
Configuring the maximum port rate····························································································································· 62
Configuring edge ports ················································································································································· 62
iii
Configuration restrictions and guidelines ··········································································································· 63
Configuration procedure ······································································································································ 63
Configuring path costs of ports ···································································································································· 63
Specifying a standard for the device to use when it calculates the default path cost ··································· 63
Configuring path costs of ports···························································································································· 65
Configuration example ········································································································································· 65
Configuring the port priority ········································································································································· 65
Configuring the port link type······································································································································· 66
Configuration restrictions and guidelines ··········································································································· 66
Configuration procedure ······································································································································ 66
Configuring the mode a port uses to recognize and send MSTP packets ······························································· 67
Enabling outputting port state transition information·································································································· 67
Enabling the spanning tree feature ······························································································································ 68
Performing mCheck························································································································································ 68
Performing mCheck globally································································································································ 69
Performing mCheck in interface view ················································································································· 69
Configuring digest snooping ········································································································································ 69
Configuration prerequisites ·································································································································· 69
Configuration restrictions and guidelines ··········································································································· 70
Configuration procedure ······································································································································ 70
Digest snooping configuration example ············································································································· 70
Configuring No Agreement Check ······························································································································ 71
Configuration prerequisites ·································································································································· 72
Configuration procedure ······································································································································ 72
No Agreement Check configuration example···································································································· 73
Configuring protection functions ·································································································································· 73
Enabling BPDU guard ··········································································································································· 74
Enabling root guard·············································································································································· 74
Enabling loop guard ············································································································································· 75
Enabling TC-BPDU guard······································································································································ 75
Displaying and maintaining the spanning tree··········································································································· 76
MSTP configuration example········································································································································ 77
Network requirements··········································································································································· 77
Configuration procedure ······································································································································ 77
Configuring BPDU tunneling······································································································································81
Overview········································································································································································· 81
Background···························································································································································· 81
BPDU tunneling implementation··························································································································· 82
Configuration prerequisites··········································································································································· 83
Enabling BPDU tunneling ·············································································································································· 84
Configuration guidelines ······································································································································ 84
Enabling BPDU tunneling for a protocol in Layer 2 Ethernet interface view or port group view·················· 84
Enabling BPDU tunneling for a protocol in Layer 2 aggregate interface view··············································· 84
Configuring destination multicast MAC address for BPDUs······················································································ 85
BPDU tunneling for STP configuration example·········································································································· 85
Network requirements··········································································································································· 85
Configuration procedure ······································································································································ 86
BPDU tunneling for PVST configuration example········································································································ 86
Network requirements··········································································································································· 86
Configuration procedure ······································································································································ 87
Configuring VLANs····················································································································································88
Overview········································································································································································· 88
VLAN frame encapsulation ·································································································································· 89
iv
VLAN types ···························································································································································· 90
Protocols and standards ······································································································································· 90
Configuring basic VLAN settings·································································································································· 90
Configuration restrictions and guidelines ··········································································································· 90
Configuration procedure ······································································································································ 90
Configuring basic settings of a VLAN interface ········································································································· 91
Configuration procedure ······································································································································ 91
VLAN interface configuration example··············································································································· 92
Configuring port-based VLANs····································································································································· 93
Introduction to port-based VLAN ························································································································· 93
Assigning an access port to a VLAN ·················································································································· 95
Assigning a trunk port to a VLAN························································································································ 96
Assigning a hybrid port to a VLAN····················································································································· 97
Port-based VLAN configuration example············································································································ 98
Configuring MAC-based VLANs ·································································································································· 99
Introduction to MAC-based VLAN ······················································································································· 99
Configuration restrictions and guidelines ·········································································································101
Configuration procedure ····································································································································102
MAC-based VLAN configuration example ·······································································································103
Configuring protocol-based VLANs ···························································································································106
Introduction to protocol-based VLAN ················································································································106
Configuration procedure ····································································································································106
Protocol-based VLAN configuration example···································································································107
Configuring IP subnet-based VLANs ··························································································································109
Introduction ··························································································································································109
Configuration procedure ····································································································································110
IP subnet-based VLAN configuration example ·································································································110
Displaying and maintaining VLAN ····························································································································112
Configuring super VLANs······································································································································· 114
Configuration task list ··················································································································································114
Creating sub-VLANs·····················································································································································114
Configuring a super VLAN··········································································································································114
Configuring a VLAN interface for the super VLAN ··································································································115
Configuration restrictions and guidelines ·········································································································115
Configuration procedure ····································································································································115
Displaying and maintaining super VLAN··················································································································116
Super VLAN configuration example ··························································································································116
Configuring a voice VLAN ····································································································································· 119
Overview·······································································································································································119
OUI addresses ·····················································································································································119
Voice VLAN assignment modes·························································································································119
Security mode and normal mode of voice VLANs···························································································121
Configuration prerequisites·········································································································································122
Configuring QoS priority settings for voice traffic on an interface ········································································122
Configuring a port to operate in automatic voice VLAN assignment mode··························································123
Configuring a port to operate in manual voice VLAN assignment mode······························································124
Displaying and maintaining voice VLAN ··················································································································125
Voice VLAN configuration examples ·························································································································125
Automatic voice VLAN assignment mode configuration example ·································································125
Manual voice VLAN assignment mode configuration example ·····································································127
Configuring GVRP··················································································································································· 130
Overview·······································································································································································130
GARP ····································································································································································130
v
GVRP·····································································································································································133
Protocols and standards ·····································································································································133
GVRP configuration task list········································································································································133
Configuring basic GVRP functions ·····························································································································134
Configuration prerequisites ································································································································134
Configuration restrictions and guidelines ·········································································································134
Configuration procedure ····································································································································134
Configuring the GARP timers······································································································································135
Configuration restrictions and guidelines ·········································································································135
Configuration procedure ····································································································································136
Displaying and maintaining GVRP·····························································································································136
GVRP configuration examples ····································································································································137
GVRP normal registration mode configuration example·················································································137
GVRP fixed registration mode configuration example ····················································································138
GVRP forbidden registration mode configuration example············································································140
Configuring QinQ··················································································································································· 142
Overview·······································································································································································142
Background and benefits····································································································································142
How QinQ works················································································································································142
QinQ frame structure ··········································································································································143
Implementations of QinQ ···································································································································144
Modifying the TPID value in a VLAN tag··········································································································144
Protocols and standards ·····································································································································145
QinQ configuration task list········································································································································145
Configuring basic QinQ ·············································································································································146
Enabling basic QinQ··········································································································································146
Configuring VLAN transparent transmission ····································································································146
Configuring selective QinQ ········································································································································147
Configuring an outer VLAN tagging policy ·····································································································147
Configuring an inner-outer VLAN 802.1p priority mapping··········································································148
Configuring inner VLAN ID substitution ············································································································149
Configuring the TPID value in VLAN tags··················································································································150
In system view······················································································································································150
In interface or port group view ··························································································································150
QinQ configuration examples ····································································································································151
Basic QinQ configuration example···················································································································151
Selective QinQ configuration example·············································································································154
VLAN transparent transmission configuration example ··················································································157
Configuring VLAN termination······························································································································· 159
Overview·······································································································································································159
VLAN termination types ······································································································································159
Application scenarios ·········································································································································159
VLAN termination configuration task list ···················································································································160
Configuring Dot1q termination···································································································································161
Configuring unambiguous Dot1q termination··································································································161
Configuring ambiguous Dot1q termination······································································································162
Configuring QinQ termination ···································································································································162
Configuring unambiguous QinQ termination ··································································································163
Configuring ambiguous QinQ termination·······································································································163
Enabling a VLAN termination-enabled interface to transmit broadcasts and multicasts ······································164
Configuring the TPID for VLAN-tagged packets········································································································164
Unambiguous Dot1q termination configuration example························································································165
Network requirements·········································································································································165
vi
Configuration procedure ····································································································································166
Ambiguous Dot1q termination configuration example ····························································································167
Network requirements·········································································································································167
Configuration procedure ····································································································································168
Configuration example for Dot1q termination supporting PPPoE server································································169
Network requirements·········································································································································169
Configuration procedure ····································································································································169
Unambiguous QinQ termination configuration example ························································································170
Network requirements·········································································································································170
Configuration procedure ····································································································································170
Ambiguous QinQ termination configuration example·····························································································171
Network requirements·········································································································································171
Configuration procedure ····································································································································172
Configuration example for QinQ termination supporting PPPoE server ································································173
Network requirements·········································································································································173
Configuration procedure ····································································································································174
Configuration example for QinQ termination supporting DHCP relay··································································174
Network requirements·········································································································································174
Configuration procedure ····································································································································175
Configuring VLAN mapping ·································································································································· 178
Overview·······································································································································································178
Application scenario of one-to-one and many-to-one VLAN mapping ··························································178
Application scenario of one-to-two and two-to-two VLAN mapping······························································179
Concepts and terms ············································································································································180
VLAN mapping implementations ·······················································································································181
VLAN mapping configuration tasks ···························································································································183
Configuring one-to-one VLAN mapping ····················································································································184
Configuration prerequisites ································································································································184
Configuring an uplink policy······························································································································184
Configuring a downlink policy ··························································································································185
Configuring the customer-side port····················································································································185
Configuring the network-side port ·····················································································································186
Configuring many-to-one VLAN mapping ·················································································································186
Configuration prerequisites ································································································································187
Enabling DHCP snooping···································································································································187
Enabling ARP detection in SVLANs ···················································································································187
Configuring an uplink policy······························································································································188
Configuring the customer-side port····················································································································188
Configuring the network-side port ·····················································································································189
Configuring one-to-two VLAN mapping ····················································································································190
Configuration prerequisites ································································································································190
Configuring an uplink policy······························································································································190
Configuring the customer-side port····················································································································191
Configuring the network-side port ·····················································································································191
Configuring two-to-two VLAN mapping·····················································································································192
Configuring an uplink policy for the customer-side port ·················································································192
Configuring an uplink policy for the network-side port···················································································193
Configuring a downlink policy for the customer-side port ··············································································194
Configuring the customer-side port····················································································································195
Configuring the network-side port ·····················································································································195
VLAN mapping configuration examples ···················································································································196
One-to-one and many-to-one VLAN mapping configuration example···························································196
One-to-two and two-to-two VLAN mapping configuration example ······························································202
vii
Configuring LLDP····················································································································································· 206
Overview·······································································································································································206
Basic concepts ·····················································································································································206
Work mechanism ················································································································································210
Protocols and standards ·····································································································································211
LLDP configuration task list ··········································································································································211
Performing basic LLDP configuration··························································································································211
Enabling LLDP ······················································································································································211
Setting the LLDP operating mode ·······················································································································212
Setting the LLDP re-initialization delay ··············································································································212
Enabling LLDP polling··········································································································································213
Configuring the advertisable TLVs ·····················································································································213
Configuring the management address and its encoding format····································································214
Setting other LLDP parameters····························································································································215
Setting an encapsulation format for LLDPDUs ··································································································215
Configuring CDP compatibility···································································································································216
Configuration prerequisites ································································································································216
Configuring CDP compatibility ··························································································································217
Configuring LLDP trapping ··········································································································································217
Displaying and maintaining LLDP·······························································································································218
Basic LLDP configuration example······························································································································218
CDP-compatible LLDP configuration example ···········································································································221
Support and other resources ·································································································································· 223
Contacting HP ······························································································································································223
Subscription service ············································································································································223
Related information······················································································································································223
Documents····························································································································································223
Websites·······························································································································································223
Conventions ··································································································································································224
Index ········································································································································································ 226
1
Configuring the MAC address table
This book covers only the unicast MAC address table. For information about configuring static multicast
MAC address table entries, see IP Multicast Configuration Guide. For information about MAC address
table configuration in VPLS, see MPLS Configuration Guide.
The MAC address table configuration tasks can be performed in any order.
The MAC address table is available on only SAP modules that are operating in bridge mode.
Overview
To reduce single-destination packet flooding in a switched LAN, an Ethernet device uses a MAC address
table for forwarding frames. This table describes from which port a MAC address (or host) can be
reached. When forwarding a single-destination frame, the device first looks up the destination MAC
address of the frame in the MAC address table for a match. If the device finds an entry, it forwards the
frame out of the outgoing port in the entry. If the device does not find an entry, it floods the frame out of
all but the incoming port.
To view MAC address table information, use the display mac-address command, as follows:
<Sysname> display mac-address
MAC ADDR VLAN ID STATE PORT INDEX AGING STATE
000f-e201-0101 1 Config static GigabitEthernet4/0/1 NOAGED
--- 1 mac address(es) found ---
How a MAC address table entry is created
The device automatically learns entries in the MAC address table, or you can add them manually.
MAC address learning
The device can automatically populate its MAC address table by learning the source MAC addresses of
incoming frames on each port.
When a frame arrives at a port, Port A, for example, the device performs the following tasks:
1. Verifies the source MAC address (for example, MAC-SOURCE) of the frame.
2. Looks up the source MAC address in the MAC address table.
3. Updates an entry if it finds one. If the device does not find an entry, it adds an entry for
MAC-SOURCE and Port A.
The device performs this learning process each time it receives a frame from an unknown source MAC
address, until the MAC address table is fully populated.
After learning a source MAC address, when the device receives a frame destined for MAC-SOURCE, the
device finds the MAC-SOURCE entry in the MAC address table and forwards the frame out of Port A.
2
Manually configuring MAC address entries
With dynamic MAC address learning, a device does not distinguish between illegitimate and legitimate
frames. For example, when a hacker sends frames with a forged source MAC address to a port different
from the one to which the real MAC address is connected, the device creates an entry for the forged
MAC address, and forwards frames destined for the legal user to the hacker instead.
To improve port security, you can bind specific user devices to the port by manually adding MAC address
entries to the MAC address table of the device.
Types of MAC address table entries
A MAC address table can contain the following types of entries:
•Static entries—Manually added and never age out.
•Dynamic entries—Manually added or dynamically learned, and might age out.
•Destination blackhole entries—Manually configured and never age out. They are configured for
filtering out frames with specific destination MAC addresses. For example, to block all packets
destined for a specific user for security concerns, you can configure the MAC address of this user
as a destination blackhole MAC address entry.
A static or destination blackhole MAC address entry can overwrite a dynamic MAC address entry, but
not vice versa.
To adapt to network changes and prevent inactive entries from occupying table space, an aging
mechanism is adopted for dynamic MAC address entries. Each time a dynamic MAC address entry is
learned or created, an aging timer starts. If the entry has not updated when the aging timer expires, the
device deletes the entry. If the entry has updated before the aging timer expires, the aging timer restarts.
Configuring static, dynamic, and blackhole MAC
address table entries
To prevent MAC address spoofing attacks and improve port security, manually add MAC address table
entries to bind ports with MAC addresses. You can also configure blackhole MAC address entries to filter
out packets with certain destination MAC addresses.
The MAC address table can contain only Layer 2 Ethernet ports and Layer 2 aggregate interfaces.
Adding or modifying a static or dynamic MAC address table
entry in system view
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Add or modify a
dynamic or static
MAC address entry.
mac-address { dynamic |static }
mac-address interface interface-type
interface-number vlan vlan-id
By default, no MAC address entry is
configured.
Make sure you have created the VLAN
and assigned the interface to the VLAN.
3
Adding or modifying a static or dynamic MAC address table
entry in interface view
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Enter Layer 2 Ethernet or
aggregate interface view.
interface interface-type
interface-number N/A
3. Add or modify a static or
dynamic MAC address entry.
mac-address { dynamic |
static }mac-address vlan
vlan-id
By default, no MAC address entry is
configured.
Make sure you have created the VLAN and
assigned the interface to the VLAN.
Configuring a blackhole MAC address entry
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Add or modify a blackhole
MAC address entry.
mac-address blackhole mac-address
vlan vlan-id
By default, no MAC address entry
is configured.
Disabling MAC address learning
Sometimes, you might need to disable MAC address learning to prevent the MAC address table from
being saturated, for example, when your device is being attacked by a large volume of packets with
different source MAC addresses.
You can disable MAC address learning globally, on a per-port basis, or on a per-VLAN basis.
If no static entries are configured, the learned MAC addresses are removed 5 minutes later after MAC
address learning is disabled.
Disabling global MAC address learning
Disabling global MAC address learning disables the learning function on all ports.
To disable global MAC address learning:
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Disable global MAC address
learning. mac-address mac-learning disable
By default, global MAC address
learning is enabled.
4
Disabling MAC address learning on ports
You can disable MAC address learning on a single port, or on all ports in a port group.
To disable MAC address learning on an interface or a port group:
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Enter interface view
or port group view.
•Enter Layer 2 Ethernet or
aggregate interface view:
interface interface-type
interface-number
•Enter port group view:
port-group manual
port-group-name
Use either command.
Settings in interface view take effect only on
the current interface. Settings in port group
view take effect on all member ports in the
port group.
For more information about port groups, see
"Configuring Ethernet interfaces."
3. Disable MAC
address learning.
mac-address mac-learning
disable
By default, MAC address learning is
enabled on each port.
Disabling MAC address learning on a VLAN
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Enter VLAN view. vlan vlan-id N/A
3. Disable MAC address
learning on the VLAN. mac-address mac-learning disable
By default, MAC address learning
is enabled on each VLAN.
Configuring the aging timer for dynamic MAC
address entries
The MAC address table uses an aging timer for dynamic MAC address entries for security and efficient
use of table space. If a dynamic MAC address entry has failed to update before the aging timer expires,
the device deletes that entry. This aging mechanism makes sure the MAC address table can promptly
update to accommodate the most recent network changes.
Set the aging timer appropriately. Too long an aging interval might cause the MAC address table to
retain outdated entries, exhaust the MAC address table resources, and fail to update its entries to
accommodate the most recent network changes. Too short an interval might result in removal of valid
entries, causing unnecessary floods, which could affect device performance.
To configure the aging timer for dynamic MAC address entries:
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
5
Ste
p
Command
Remarks
2. Configure the aging
timer for dynamic
MAC address
entries.
mac-address timer { aging
seconds | no-aging }
Optional.
The default aging timer for .dynamic MAC address
entries is 300 seconds.
The no-aging keyword disables the aging timer.
You can reduce floods on a stable network by disabling the aging timer to prevent dynamic entries from
unnecessarily aging out. By reducing floods, you improve not only network performance, but also
security, because you reduce the chances that a data packet will reach unintended destinations.
Configuring the MAC learning limit on ports
As the MAC address table grows, the forwarding performance of your device might degrade. To prevent
the MAC address table from getting so large that the forwarding performance degrades, you can limit
the number of MAC addresses that a port can learn.
To configure the MAC learning limit on a Layer 2 Ethernet interface, Layer 2 aggregate interface, or all
ports in a port group:
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Enter interface view or port
group view.
•Enter Layer 2 Ethernet or
aggregate interface view:
interface interface-type
interface-number
•Enter port group view:
port-group manual
port-group-name
Use either command.
Settings in interface view take effect only
on the specific interface. Settings in port
group view take effect on all member
ports in the port group.
3. Configure the MAC
learning limit on the
interface or port group.
mac-address max-mac-count
count
By default, the MAC learning limit on an
interface is not configured.
Displaying and maintaining MAC address tables
Task Command
Remarks
Display MAC address table
information.
display mac-address [ mac-address [ vlan vlan-id ] |
[ [ dynamic | static ] [ interface interface-type
interface-number ] | blackhole ] [ vlan vlan-id ]
[ count ] ] [ |{ begin | exclude | include }
regular-expression ]
Available in any
view.
Display the aging timer for
dynamic MAC address
entries.
display mac-address aging-time [ |{ begin |
exclude | include } regular-expression ]
Available in any
view.
Display the system or interface
MAC address learning state.
display mac-address mac-learning [ interface-type
interface-number ] [ |{ begin | exclude | include }
regular-expression ]
Available in any
view.
6
Task Command
Remarks
Display MAC address
statistics.
display mac-address statistics [ |{ begin | exclude |
include } regular-expression ]
Available in any
view.
MAC address table configuration example
Network requirements
As shown in Figure 1:
•The MAC address of Host A is 000f-e235-dc71 and belongs to VLAN 1. It is connected to
GigabitEthernet 4/0/1 of the device. To prevent MAC address spoofing, add a static entry for the
host in the MAC address table of the device.
•The MAC address of Host B is 000f-e235-abcd and belongs to VLAN 1. For security, because this
host once behaved suspiciously on the network, add a destination blackhole MAC address entry for
the host MAC address, so all packets destined for the host are dropped.
•Set the aging timer for dynamic MAC address entries to 500 seconds.
Figure 1 Network diagram
Configuration procedure
# Add a static MAC address entry.
<Router> system-view
[Router] mac-address static 000f-e235-dc71 interface GigabitEthernet 4/0/1 vlan 1
# Add a destination blackhole MAC address entry.
[Router] mac-address blackhole 000f-e235-abcd vlan 1
# Set the aging timer for dynamic MAC address entries to 500 seconds.
[Router] mac-address timer aging 500
# Display the MAC address entry for GigabitEthernet 4/0/1.
[Router] display mac-address interface GigabitEthernet 4/0/1
MAC ADDR VLAN ID STATE PORT INDEX AGING STATE
7
000f-e235-dc71 1 Config static GigabitEthernet4/0/1 NOAGED
--- 1 mac address(es) found ---
# Display information about the destination blackhole MAC address table.
[Router] display mac-address blackhole
MAC ADDR VLAN ID STATE PORT INDEX AGING STATE
000f-e235-abcd 1 Blackhole N/A NOAGED
--- 1 mac address(es) found ---
# View the aging time of dynamic MAC address entries.
[Router] display mac-address aging-time
Mac address aging time: 500s
8
Configuring MAC Information
NOTE:
The MAC Information feature is available on only SAP modules that are operating in bridge mode.
The MAC Information feature can generate syslog messages or SNMP traps when MAC address entries
are learned or deleted. You can use these messages to monitor users leaving or joining the network for
suspicious users.
The MAC Information feature buffers the MAC change syslog messages or SNMP traps in a queue and
sends them to the information center regularly. If the queue gets full before the sending interval expires,
the oldest queue entry is deleted for the new syslog message or SNMP trap. To send a syslog message
or SNMP trap immediately after it is created, set the queue length to zero.
Configuration guidelines
Enable MAC Information globally before you enable it on interfaces.
Enabling MAC Information globally
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Enable MAC Information
globally. mac-address information enable By default, MAC Information is
disabled globally.
Enabling MAC Information on an interface
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Enter Layer 2 Ethernet
interface view.
interface interface-type
interface-number N/A
3. Enable MAC Information on
the interface.
mac-address information enable
{added |deleted }
By default, MAC Information is
disabled on each interface.
9
Configuring MAC Information mode
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Configure MAC Information
mode.
mac-address information mode
{ syslog | trap }
Optional.
The default setting is trap.
Configuring the interval for sending syslog or trap
messages
To prevent syslog or trap messages from being sent too frequently, change the interval for sending syslog
or trap messages.
To set the interval for sending syslog or trap messages:
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Set the interval for sending
syslog or trap messages.
mac-address information interval
interval-time The default setting is one second.
Configuring the MAC Information queue length
Ste
p
Command
Remarks
1. Enter system view. system-view N/A
2. Configure the MAC
Information queue length.
mac-address information
queue-length value The default setting is 50.
MAC Information configuration example
Network requirements
Enable MAC Information on GigabitEthernet 4/0/1 on Router in Figure 2 to send MAC address
changes in syslog messages to Host B.
10
Figure 2 Network diagram
Configuration procedure
1. Configure Router to send syslog messages to Host B (see Network Management and Monitoring
Configuration Guide).
2. Enable MAC Information.
# Enable MAC Information globally.
<Router> system-view
[Router] mac-address information enable
# Configure MAC Information mode as syslog.
[Router] mac-address information mode syslog
# Enable MAC Information on GigabitEthernet 4/0/1.
[Router] interface GigabitEthernet 4/0/1
[Router-GigabitEthernet4/0/1] mac-address information enable added
[Router-GigabitEthernet4/0/1] mac-address information enable deleted
[Router-GigabitEthernet4/0/1] quit
# Set the MAC Information queue length to 100.
[Router] mac-address information queue-length 100
# Set the MAC change sending interval to 20 seconds.
[Router] mac-address information interval 20
Host A
192.168.1.1/24
Host B
192.168.1.2/24
Server
192.168.1.3/24
Router
GE4/0/1
GE4/0/3
GE4/0/2
11
Configuring Ethernet link aggregation
Layer 2 aggregation groups are supported only on SAP modules operating in bridge mode.
Overview
Ethernet link aggregation, or simply link aggregation, combines multiple physical Ethernet ports into one
logical link called an "aggregate link." Link aggregation delivers the following benefits:
•Increases bandwidth beyond the limits of any single link. In an aggregate link, traffic is distributed
across the member ports.
•Improves link reliability. The member ports dynamically back up one another. When a member port
fails, its traffic is automatically switched to other member ports.
As shown in Figure 3, Router A and Router B are connected by three physical Ethernet links. These
physical Ethernet links are combined into an aggregate link, Link Aggregation 1. The bandwidth of this
aggregate link is as high as the total bandwidth of the three physical Ethernet links. At the same time, the
three Ethernet links back up one another.
Figure 3 Ethernet link aggregation
Basic concepts
This section describes some basic link aggregation concepts.
Aggregation group, member port, and aggregate interface
Link aggregation is implemented by combining Ethernet interfaces into a link aggregation group. Each
link aggregation group has one logical aggregate interface. To an upper layer entity, a link aggregation
group appears to be a single logical link and data traffic is transmitted through the aggregate interface.
The rate of an aggregate interface equals the total rate of its member ports in Selected state, and its
duplex mode is the same as the selected member ports. For more information about the states of member
ports in an aggregation group, see "Aggregation states of member ports in an aggregation group."
Aggregate interfaces are one of the following types:
•Bridge-aggregation (BAGG) interfaces—Also called "Layer 2 aggregate interfaces."
•Route-aggregation (RAGG) interfaces—Also called "Layer 3 aggregate interfaces." On a Layer 3
aggregate interface, you can create subinterfaces. The Layer 3 aggregate subinterfaces are logical
interfaces operating at the network layer. They can receive VLAN tagged packets for their Layer 3
aggregate interface.
When you create an aggregate interface, the switch automatically creates an aggregation group of the
same type and number as the aggregate interface. For example, when you create interface
Bridge-Aggregation 1, Layer 2 aggregation group 1 is automatically created.
Other manuals for HP ProCurve Series 6600
6
This manual suits for next models
1
Table of contents
Other HP Network Router manuals
HP
HP MSR 93 Series User manual
HP
HP FlexNetwork MSR Series User manual
HP
HP Pavilion 501 Instruction Manual
HP
HP SCSI-Fibre Channel Router User manual
HP
HP 6125XLG User manual
HP
HP StorageWorks MPX200 Instruction Manual
HP
HP 5120 SI Series User manual
HP
HP 5920 User manual
HP
HP FlexNetwork MSR Series Installation manual
HP
HP Wireless TV Connect Specification sheet
HP
HP R100-Series Instruction Manual
HP
HP StorageWorks N1200-320 User manual
HP
HP Pavilion a6600 User manual
HP
HP MSR954 Series User manual
HP
HP StorageWorks MPX200 User manual
HP
HP Fax 650 User manual
HP
HP MSR93x Series User manual
HP
HP 1810 series User manual
HP
HP PS110 User manual
HP
HP MSR1003-8S User manual
