Virtual Private LAN Services
7750 SR OS Services Guide Page 427
In order to eliminate the ability of a subscriber to cause a DOS attack, the node restricts the
learning of protected MAC addresses based on a statically defined list. In addition the destination
MAC address is checked against the protected MAC list to verify that a packet entering a
restricted SAP has a protected MAC as a destination.