This post underlines the process of configuring a blackhole MAC address as part of the most common MAC address operations. Please see below for details.
To prevent a hacker from using a MAC address to attack a user device or network, configure the MAC address of an untrusted user as the blackhole MAC address. The switch then discards the received packets with the source or destination MAC address as the blackhole MAC address.
The switch provides two blackhole MAC address modes: global and VLAN-based blackhole MAC addresses.
- In the system view, configure the MAC address of 0000-0012-0034 as a global blackhole MAC address:
<HUAWEI> system-view[HUAWEI] mac-address blackhole 0000-0012-0034 - In the system view, configure the MAC address of 0000-0012-0035 as the blackhole MAC address in VLAN 10.
<HUAWEI> system-view[HUAWEI] mac-address blackhole 0000-0012-0035 vlan 10More information: S Series Switches Common Operation Guide.
