Configuring Ip Demux Prefixes; Configuring Mac Address Validation On Static Demux Interfaces - Juniper JUNOS 10.1 - CONFIGURATION GUIDE 1-2010 Configuration Manual

JUNOS 10.1 Network Interfaces Configuration Guide

Configuring IP Demux Prefixes

You configure demux prefixes for use by the underlying interface. The demux prefixes
can represent individual hosts or networks. For a given demux interface unit, you
can configure either demux source or demux destination prefixes but not both. You
can choose not to configure a demux source or demux destination prefix. This type
of configuration results in a transmit-only interface.
To configure IP demux prefixes, include the
statement:
You can include these statements at the following hierarchy levels:

Configuring MAC Address Validation on Static Demux Interfaces

MAC address validation enables the router to validate that received packets contain
a trusted IP source and an Ethernet MAC source address.
MAC address validation is supported on static demux interfaces on MX Series routers
only.
There are two types of MAC address validation that you can configure:
260
Configuring IP Demux Prefixes
interfaces {
demux0 {
unit logical-unit-number {
family family;
demux-destination {
destination-prefix;
}
}
family family;
demux-source {
source-prefix;
}
}
}
}
}
[edit]
[edit logical-systems logical-system-name]
[edit logical-systems logical-system-name routing-instances routing-instance-name]
Loose—Forwards packets when both the IP source address and the MAC source
address match one of the trusted address tuples.
Drops packets when the IP source address matches one of the trusted tuples,
but the MAC address does not support the MAC address of the tuple
Continues to forward packets when the source address of the incoming packet
does not match any of the trusted IP addresses.
demux-destination or demux-source