Huawei core switch configures mac address whitelist access

Huawei core switch configures mac address whitelist access

Huawei core switches are configured with a whitelist of mac addresses, allowing only terminals in the whitelist to access the specified VLAN.

For example:
only allow computers with mac address: 4557-ca30-75a1 to access vlan 101.

Log in to the core switch and find the mac address corresponding to the computer:

Huawei core switch configures mac address whitelist access

Or enter ipconfig /all in the cmd of the computer to check the mac address:
Huawei core switch configures mac address whitelist access

Configure the whitelist to
allow the mac address to access vlan 101 [SW-Core]user-bind static mac-address 4c57-ca30-74a1 vlan 101

Then turn on the source address restriction check on the vlan 101 interface:
[SW-Core]vlan 101
[SW-Core-vlan101]ip source check user-bind enable
Huawei core switch configures mac address whitelist access

After the restriction is turned on, computers with other mac addresses can obtain IP but cannot connect to the network.

Guess you like

Origin blog.51cto.com/2221384/2679179