13
Step Command
Remarks
2.
Disable remote-MAC
address learning.
vxlan tunnel mac-learning
disable
By default, remote-MAC address learning
is enabled.
When network attacks occur, disable
remote-MAC address learning to prevent
the device from learning incorrect remote
MAC addresses. You can manually add
static remote-MAC address entries.
Enabling local-MAC change logging
Local-MAC change logging enables the VXLAN module to send a log message to the information
center when a local MAC address is added or removed.
With the information center, you can set log message filtering and output rules, including output
destinations. For more information about configuring the information center, see
Network
Management and Monitoring Configuration Guide
.
To enable local-MAC change logging:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable local-MAC change
logging.
vxlan local-mac report
By default, local-MAC change
logging is disabled.
Confining floods to the local site
By default, the VTEP floods broadcast, unknown unicast, and unknown multicast frames received
from the local site to the following interfaces in the frame's VXLAN:
•
All site-facing interfaces except for the incoming interface.
•
All VXLAN tunnel interfaces.
To confine a kind of flood traffic to the site-facing interfaces, disable flooding for that kind of flood
traffic on the VSI bound to the VXLAN. The VSI will not flood the corresponding frames to VXLAN
tunnel interfaces.
To confine floods to site-facing interfaces for a VXLAN:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter VSI view.
vsi
vsi-name
N/A
3.
Disable flooding for the
VSI.
flooding disable
{
all
|
{
broadcast
|
unknown-multicast
|
unknown-unicast
} * }
By default, flooding is enabled for a VSI.
