mac-validate
Syntax mac-validate (loose | strict);
Hierarchy Level [edit interfaces interface-name unit logical-unit-number family family]
Release Information Statement introduced in Junos OS Release 9.3.
Statement introduced in Junos OS Release 12.3R2 for EX Series switches.
Description Enable IP and MAC address validation for static Ethernet and IP demux interfaces.
Options loose—Forwards incoming packets when both the IP source address and the MAC source
address match one of the trusted address tuples. Drops packets when the IP source
address matches one of the trusted tuples, but the MAC address does not match
the MAC address of the tuple. Continues to forward incoming packets when the
source address of the incoming packet does not match any of the trusted IP
addresses.
strict—Forwards incoming packets when both the IP source address and the MAC source
address match one of the trusted address tuples. Drops packets when the MAC
address does not match the tuple's MAC source address, or when IP source address
of the incoming packet does not match any of the trusted IP addresses.
Required Privilege
Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
Related
Documentation
• MAC Address Validation on Static Ethernet Interfaces Overview
• Configuring an IP Demultiplexing Interface
• Configuring a VLAN Demultiplexing Interface
1593Copyright © 2017, Juniper Networks, Inc.
Chapter 41: Configuration Statements
To Next Page
Loading...
Need help?
General
