Method used to configure dynamic MAC address entries on USG firewalls

3

Dynamic MAC address entries are manually configured or learned by a device. They can be aged based on the configuration.
To configure a dynamic MAC address entry, in the system or interface view, run the mac-address dynamic mac-address interface-type interface-number vlan vlan-id command.

Other related questions:
Method used to configure blackhole MAC address entries on USG firewalls
Blackhole MAC address entries are a special type of MAC addresses that are manually configured. A device discards a packet if the destination MAC address in the packet is a blackhole MAC address. To configure a blackhole MAC address entry, in the system or interface view, run the mac-address blackhole mac-address interface-type interface-number vlan vlan-id command.

Method used to configure static MAC address entries on USG firewalls
Static MAC address entries are added or deleted manually, and cannot be aged. Static MAC address entries can decrease the broadcast traffic on the network. Static MAC address entries are applicable to a network with less device changed. To configure a static MAC address entry, in the system or interface view, run the mac-address static mac-address interface-type interface-number vlan vlan-id command.

Whether USG firewalls support dynamic MAC address entries
The USG firewalls support dynamic MAC address entries.

Method used to configure the aging time configured for MAC address entries on USG firewalls
Run the mac-address aging-time seconds command to configure the aging time for a dynamic MAC address entry. The value of seconds is 0 or ranges from 30s to 65535s. If seconds is set to 0, the MAC address entry is not aged. By default, the aging time for a dynamic MAC address entry is set to 300s. The aging time of an MAC address table is for dynamic entries only. Non-dynamic entries are not aged.

Method used to modify the MAC address on USG firewalls
Method used to modify the MAC address on the USG2000, USG5000, and USG6000: USG firewalls do not support modification of the MAC address.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top