Network requirements
As shown in Figure 1:
Host A at MAC address 000f-e235-dc71 is connected to interface GigabitEthernet 2/1/1 of Device and belongs to VLAN 1.
Host B at MAC address 000f-e235-abcd, which behaved suspiciously on the network, also belongs to VLAN 1.
Configure the MAC address table as follows:
To prevent MAC address spoofing, add a static entry for Host A in the MAC address table of Device.
To drop all frames destined for Host B, add a blackhole MAC address entry for Host B.
Set the aging timer to 500 seconds for dynamic MAC address entries.
Figure 1: Network diagram
