Page 160 7750 SR OS Services Guide
• SAPs which are members of this Residential Split Horizon Group will have:
→ Double-pass queuing at ingress as default setting (can be disabled)
→ STP disabled (cannot be enabled)
→ ARP reply agent enabled per default (can be disabled)
→ MAC pinning enabled per default (can be disabled)
→ Downstream Broadcast packets are discarded thus also blocking the unknown, flooded
traffic
→ Downstream Multicast packets are allowed when IGMP snooping is enabled
• Spoke SDPs which are members of this Residential Split Horizon Group will have:
→ Downstream multicast traffic supported
→ Double-pass queuing is not applicable
→ STP is disabled (can be enabled)
→ ARP reply agent is not applicable (dhcp-lease-states are not supported on spoke SDPs)
→ MAC pinning enabled per default (can be disabled)
Default A split horizon group is by default not created as a residential-group.
restrict-protected-src
Syntax restrict-protected-src alarm-only
no restrict-protected-src
Context config>service>pw-template>split-horizon-group
Description This command indicates how the agent will handle relearn requests for protected MAC addresses.
While enabled all packets entering the configured SAP, or any SAP that is part of the configured split
horizon group (SHG) will be verified not to contain a protected source MAC address. If the packet is
found to contain such an address the packet will be discarded, a trap will be generated and the SAP
will be made operationally down. The SAP must be shutdown and enabled (no shutdown) for this
state to be cleared. Notice that the use of restrict-protected-src under the SAP is designed only to
allow this capability for SAPs that are not part of a SHG. If a SAP is part of a SHG that has restrict-
protected-src enabled the SAP will be restricted.
Default no restrict-protected-src
restrict-unprotected-dst
Syntax restrict-unprotected-dst alarm-only
no restrict-unprotected-dst
Context config>service>pw-template>split-horizon-group
Description This command indicates how the system will forward packets destined to an unprotected MAC
address. While enabled all packets entering the configured SAP will be verified to contain a protected
destination MAC address. If the packet is found to contain a non-protected destination MAC, it will
be discarded. Detecting a non-protected destination MAC on the SAP will not cause the SAP to be
placed in the operationally down state.
To Next Page
Loading...
