How do I configure the blackhole MAC address of an AR

17

To configure a blackhole MAC address on an AR, use the following method.
Run the mac-address blackhole mac-address vlan vlan-id command in the system view.
For example:
# Add teh following blackhome MAC address entry in which the destination MAC address is 0004-0004-0004 and the VLAN ID is VLAN 5 to the MAC address table.
[Huawei] mac-address blackhole 0004-0004-0004 vlan 5

Note:
- The AR510 does not support blackhole MAC address entries.
-  For the AR161, AR161W, AR169, AR161G-L, AR169G-L, and AR169-P-M among AR169 series, when the source MAC address of packets is a blackhole MAC address, the AR does not discard the packets. Instead, the AR forwards them.
- On the 4GE-2S, 4ES2G-S, 4ES2GP-S, and 9ES2 cards, when the source MAC address of packets is a blackhole MAC address, the AR does not discard the packets. Instead, the AR forwards them.

Other related questions:
Configure blackhole MAC addresses on S series switch
Perform the following operations to configure blackhole MAC addresses on S series switches (except S1700): 1. Configure a blackhole MAC address in a VLAN. [HUAWEI] vlan batch 100 [HUAWEI] mac-address blackhole 0-0-1 vlan 100 2. Configure a blackhole MAC address globally. The globally configured blackhole MAC address takes effect in all VLANs. [HUAWEI] mac-address blackhole 0-0-1 After the preceding configuration is complete, you can run the display mac-address blackhole command to view the configured blackhole MAC address.

Whether USG firewalls support blackhole MAC address entries
The USG firewalls support blackhole MAC address entries.

How do I change the MAC address of an AR
To change the MAC address of an AR, use the following method. Run the set system-mac command in the diagnostic view. For example, # Change the default MAC address to 00e0-0987-7890. [Huawei] diagnose [Huawei-diagnose] set system-mac default 00e0-0987-7890 Info: The public mac-address set pass. Note: A MAC address is globally unique. Do not change the MAC address of an AR in normal situations. When configuring a MAC address, note the following points: - The MAC address cannot be all 0s or all 1s. - The multicast MAC address cannot be configured. - If a device supports multiple MAC addresses, the last four bits of the MAC address must be all 0s.

Add blackhole MAC address entries on the S1700-FR or S1700-GFR switch
Add blackhole MAC addresses to the MAC address table on an S1700-FR or S1700-GFR switch as follows: 1. Choose Service Management > MAC. 2. Select Blackhole MAC Table and click New. 3. On the page displayed, enter information about the blackhole MAC address to be added, and click Apply.

Method used to configure blackhole MAC address entries on USG firewalls
Blackhole MAC address entries are a special type of MAC addresses that are manually configured. A device discards a packet if the destination MAC address in the packet is a blackhole MAC address. To configure a blackhole MAC address entry, in the system or interface view, run the mac-address blackhole mac-address interface-type interface-number vlan vlan-id command.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top