Mac-Validate - Juniper ACX1000 Configuration Manual

mac-validate

Syntax
Hierarchy Level
Release Information
Description
Options
Required Privilege
Level
Related
Documentation
Copyright © 2017, Juniper Networks, Inc.
mac-validate (loose | strict);
[edit interfaces interface-name unit logical-unit-number family family]
Statement introduced in Junos OS Release 9.3.
Statement introduced in Junos OS Release 12.3R2 for EX Series switches.
Enable IP and MAC address validation for static Ethernet and IP demux interfaces.
—Forwards incoming packets when both the IP source address and the MAC source
loose
address match one of the trusted address tuples. Drops packets when the IP source
address matches one of the trusted tuples, but the MAC address does not match
the MAC address of the tuple. Continues to forward incoming packets when the
source address of the incoming packet does not match any of the trusted IP
addresses.
—Forwards incoming packets when both the IP source address and the MAC source
strict
address match one of the trusted address tuples. Drops packets when the MAC
address does not match the tuple's MAC source address, or when IP source address
of the incoming packet does not match any of the trusted IP addresses.
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
MAC Address Validation on Static Ethernet Interfaces Overview
Configuring an IP Demultiplexing Interface
Configuring a VLAN Demultiplexing Interface
Chapter 41: Configuration Statements
1593