Virtual Private LAN Services
7750 SR OS Services Guide Page 649
restrict-unprotected-dst
Syntax restrict-unprotected-dst alarm-only
no restrict-unprotected-dst
Context config>service>vpls>split-horizon-group
config>service>vpls>sap
Description This command indicates how the system will forward packets destined to an unprotected MAC
address. While enabled all packets entering the configured SAP will be verified to contain a protected
destination MAC address. If the packet is found to contain a non-protected destination MAC, it will
be discarded. Detecting a non-protected destination MAC on the SAP will not cause the SAP to be
placed in the operationally down state.
If a MAC is defined with a static address, after that MAC was already learned by the system on a
restricted SAP, the system will bring the SAP to an operationally down state, flush the MAC and
generate a trap.
If the destination MAC address of a packet entering a restricted SAP with restrict-unprotected-dst
enabled, and if it is not a protected MAC, the packet will be discarded.
If the destination MAC address is unknown, even if the packet is entering a restricted SAP, with
restrict-unprotected-dst enabled, it will be flooded.
You can specify a static MAC in the mac-protect list. This action fails if the static MAC is defined
under a restricted SAP. If the MAC is protected first, the system does not allow it to be added as static
under a restricted SAP.
Default no restrict-unprotected-dst
root-guard
Syntax [no] root-guard
Context config>service>vpls>sap>stp
config>service>vpls>spoke-sdp>stp
Description This command specifies whether this port is allowed to become an STP root port. It corresponds to
the restrictedRole parameter in 802.1Q. If set, it can cause lack of spanning tree connectivity.
Default no root-guard
static-host
Syntax static-host ip ip/did-address [mac ieee-address] [create]
static-host mac ieee-address [create]
no static-host [ip ip-address>] mac ieee-address>
no static-host all [force]
no static-host ip ip-address
Context config>service>vpls>sap
To Next Page
Loading...
