Enabling Mac Address Filtering - Juniper ACX1000 Configuration Manual

ACX Series Universal Access Router Configuration Guide
Related
Documentation

Enabling MAC Address Filtering

350
user@host> show dhcp server binding routing-instance customer routing instance
To display extended DHCP local server statistics:
user@host> show dhcp server statistics routing-instance customer routing instance
To clear the binding state of a DHCP client from the client table on the extended DHCP
local server:
user@host> clear dhcp server binding routing-instance customer routing instance
To clear all extended DHCP local server statistics:
user@host> clear dhcp server statistics routing-instance customer routing instance
CLI Explorer
To support source MAC address filtering for blocking unknown DHCP clients, specify the
list of MAC addresses in the
source-address-filter {
mac-address;
}
If you want to enable source address filtering, use the
If you don't want to enable source address filtering, use the
You can include these statements at the following hierarchy levels:
[edit interfaces interface-name gigether-options]
To check packets dropped due to source MAC filtering, use the run show interfaces
interface-name extensive show command.
NOTE: Source MAC filtering is implemented using ternary content addressable
memory (TCAM) space. The allocated TCAM space for this feature is shared
by the filter-based forwarding (FBF) filter, which redirects the matched flow
to the configured routing instance. On the logical interface, if these features
are enabled, then source MAC filter takes higher precedence over the FBF
filter. These features work independently on different logical interfaces
without any limitation. From a scaling perspective, the allocated 125 hardware
TCAM entries are shared by these features and the allocation of TCAM entries
work on a first-come-first-serve basis mode. Source MAC filtering can be
scaled up to 125 TCAM entries without the presence of the FBF filter. In
general, if the ACX Series router has N physical ports, then it can support
(125–N) source MAC addresses at the system level.
source-address-filter statement:
source-filtering
statement.
no-source-filtering statement.
Copyright © 2017, Juniper Networks, Inc.