1-7To do… Use the command… RemarksSet the maximum number ofMAC addresses the port canlearnmac-addressmax-mac-count countRequiredBy default, the number of theMAC addresses a port can learnis not limited.Specifying the maximum number of MAC addresses a port can learn disables centralized MAC addressauthentication and port security on the port. On the other hand, if you enable centralized MAC addressauthentication and port security on a port, you cannot specify the maximum number of MAC addressesthe port can learn.Disabling MAC Address learning for a VLANYou can disable a switch from learning MAC addresses in specific VLANs to improve stability andsecurity for the users belong to these VLANs and prevent unauthorized accesses.Follow these steps to disable MAC address learning for a VLAN:To do… Use the command… RemarksEnter system view system-view —Enter VLAN view vlan vlan-id —Disable the switch from learningMAC addresses in the VLANmac-addressmax-mac-count 0RequiredBy default, the device learnsMAC addresses in every VLAN.z If the VLAN is configured as a remote probe VLAN used by port mirroring, you can not disable MACaddress learning of this VLAN. Similarly, after you disable MAC address learning, this VLAN cannot be configured as a remote probe VLAN.z Disabling the MAC address learning function of a VLAN takes no effect on enabling the centralizedMAC address authentication on the ports that belong to the VLAN.
