Change the system MAC address on S series switch


Generally, it is not allowed to change the system MAC address on S series switches (except S1700). If it is required to change the system MAC address, run the set system-mac current command on modular switches and then restart the switch to make the modification take effect. Fixed switches do not support the modification of the system MAC address.

Other related questions:
On S series modular switches, after a switchover in the CSS, why the system MAC address becomes a single MAC address from multiple MAC addresses
After a CSS is configured to use MAC addresses of the master switch, the system synchronizes the MAC addresses and number of MAC addresses to the candidate standby MPU on the master switch and the system standby MPU of the cluster. Then the system standby MPU synchronizes them to the candidate standby MPU on the standby switch. If the master switch has multiple MAC addresses and the standby switch has a single MAC address, the CSS has multiple MAC addresses. In V200R001, the CSS retains the original cluster MAC address after a switchover, but the number of MAC addresses is equal to the number of MAC addresses on the new master switch. Because the original standby switch has only one MAC address, the CSS has a single MAC address after the switchover. As a result, some services in the CSS may be interrupted or the CSS may be disconnected from the operation terminal or network management system. To prevent this problem, load the latest patch on the V200R001 system software before triggering a switchover. If a switchover has occurred, restart the CSS after loading the patch. You can run the display css system-mac command to check the CSS MAC address.

Specification of the MAC address table on an S series switch
Hi, I cannot answer this question. For details about product specifications, click to look up the contact method of your local customer service engineers.

S series switches' support for MAC address authentication
S series switches (except the S1700) support MAC address authentication as follows: - In V100R006, switches except the S2700SI and S2710SI support MAC address authentication. - In versions later than V100R006, all switches support MAC address authentication.

With IPSG enabled, how will an S series switch process IP packets that do not match the binding table?
With IPSG enabled, an S series switch (except the S1700) checks IP packets against a DHCP snooping dynamic binding table or static binding table. Before the switch forwards an IP packet, it compares the source IP address, source MAC address, interface, or VLAN information in the IP packet with entries in the binding table. If a matching entry is found, the switch considers the IP packet as a valid packet and forwards it. Otherwise, the switch considers the IP packet as an attack packet and discards it. Whether an IP packet sent from a terminal connected to a port matches a binding entry or not has no effect on the status of the port (for example, the port will not change from the up state to the shutdown or error-disable state).

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top