Example: Configuring A Demux Interface - Juniper JUNOS 10.1 - CONFIGURATION GUIDE 1-2010 Configuration Manual

To configure MAC address validation on static Ethernet interfaces, include the
mac-validate (loose | strict)
logical-unit-number family family]

Example: Configuring a Demux Interface

Configure two VLANs, each with two IP demux interfaces. One VLAN demultiplexes
based on the source address; the other VLAN demultiplexes based on the destination
address.
NOTE: This example is not intended to depict any realistic deployment; it is intended
to demonstrate many possible CLI variations.
Strict—Forwards packets when both the IP source address and the MAC source
address match one of the trusted address tuples.
Drops packets when the MAC address does not match the tuple's MAC source
address, or when IP source address of the incoming packet does not match any
of the trusted IP addresses.
statement at the
[edit interfaces demux0 unit logical-unit-number family family]
mac-validate (loose | strict);
[edit]
interfaces {
fe-0/0/0 {
vlan-tagging;
unit 100 {
vlan-id 100;
demux-source inet; # Enable demux of inet prefixes
family inet {
address 10.1.1.1/24;
filter {
input vlan1-primary-in-filter;
output vlan1-primary-out-filter;
}
mac-validate loose;
}
}
unit 200 {
vlan-id 200;
demux-destination inet; # Enable demux of inet using destination addresses
family inet {
address 20.1.1.1/24;
}
}
unit 300 {
vlan-id 300;
demux-source inet; # Enable demux of inet using source addresses
family inet {
address 20.1.2.1/24;
Chapter 10: Configuring IP Demultiplexing Interfaces
[edit interfaces demux0 unit
hierarchy level.
Example: Configuring a Demux Interface
261