12
•
A remote AAA server issues an authorization VSI to the user.
For a dynamic Ethernet service instance to match traffic by source MAC address, enable
MAC-based traffic match mode for the dynamic Ethernet service instance.
To enable MAC-based traffic match mode for dynamic Ethernet service instances on an interface:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter Layer 2 Ethernet
interface view.
interface interface-type
interface-number
N/A
3.
Enable MAC-based traffic
match mode for dynamic
Ethernet service instances
on the interface.
mac-based ac
By default, VLAN-based traffic
match mode is used for dynamic
Ethernet service instances.
Managing MAC address entries
Local-MAC address entries can be dynamically learned. You can log local-MAC changes.
Remote-MAC address entries include the following types:
•
Manually created static entries.
•
Dynamic entries learned in the data plane.
Configuring static remote-MAC address entries
Do not configure static remote-MAC entries for VXLAN tunnels that are automatically established by
using EVPN.
•
EVPN re-establishes VXLAN tunnels if the transport-facing interface goes down and then
comes up. If you have configured static remote-MAC entries, the entries are deleted when the
tunnels are re-established.
•
EVPN re-establishes VXLAN tunnels if you perform configuration rollback. If the tunnel IDs
change during tunnel re-establishment, configuration rollback fails, and static remote-MAC
entries on the tunnels cannot be restored.
For more information about EVPN, see
EVPN Configuration Guide
.
To configure a static remote-MAC address entry:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Add a static
remote-MAC address
entry.
mac-address static
mac-address interface
tunnel
tunnel-number
vsi
vsi-name
By default, VXLAN VSIs do not have static
remote-MAC address entries.
For the setting to take effect, make sure the
VSI's VXLAN has been created and
specified on the VXLAN tunnel.
Disabling remote-MAC address learning
Step Command
Remarks
1.
Enter system view.
system-view
N/A
