Verification Of Mac Address Validation State Inheritance; Configuring Static Subscriber Interfaces - Juniper JUNOSE 11.1.X - BROADBAND ACCESS CONFIGURATION GUIDE 6-4-2010 Configuration Manual

Verification of MAC Address Validation State Inheritance

To verify inheritance of the MAC address validation state on a dynamic subscriber
interface, you can use the show ip mac-validate interface command and the
show arp command.
The following sample output from the show ip mac-validate interface command
displays the MAC address validation state (strict) inherited by the dynamic subscriber
interface ip74.39.64.3 from its parent static primary IP interface.
host1#show ip mac-validate interface ip74.39.64.3
ip74.39.64.3:
Building on this example, the following sample output from the show arp command
displays a static MAC address validation entry (74.39.64.3) in the ARP table for the
dynamic subscriber interface when it is created with the MAC address validation
state inherited from its parent static primary IP interface. The asterisk (*) indicates
that the ARP entry was added as the result of issuing an arp validate command
rather than an arp command.
host1#show arp

Configuring Static Subscriber Interfaces

You can configure static subscriber interfaces on ATM, Fast Ethernet, Gigabit Ethernet,
10-Gigabit Ethernet, or POS layer 2 interfaces.
The examples in this section show how to configure static subscriber interfaces on
a Fast Ethernet interface, but the steps for configuring static subscriber interfaces
over other supported layer 2 interface types are similar.
created from this primary IP interface after you change the MAC address
validation state inherit the new MAC validation state.
When you configure a dynamic subscriber interface with one or more framed
routes (subnets), we recommend that you use the ip mac-validate loose
command to configure MAC address validation for the static primary IP interface.
Using the loose keyword, which is the default, prevents the router from discarding
packets with an IP source address from a subnet.
Because enabling MAC address validation on an IP interface creates a static MAC
address validation entry in the router's ARP table, be sure to observe the system
limit for the maximum number of dynamic ARP table entries supported per line
module. See the Link Layer Maximums tables in Appendix A, System Maximums,
of the Release Notes corresponding to your software release for information about
the maximum number of dynamic ARP entries that the router supports. Currently,
this limit is set to 32,768 dynamic ARP entries for all E Series modules that
support Ethernet interfaces.
Strict
Address Hardware Addr
74.39.64.3 0090.1a40.f4f6
Address Age
10.13.10.1 21600
74.39.64.3 -
192.168.1.2 20700
Chapter 25: Configuring Subscriber Interfaces
Hardware Addr Interface
0090.6939.751b FastEthernet6/0
0090.1a40.f4f6 ip74.39.64.3 *
0090.1a40.280d FastEthernet8/2
Configuring Static Subscriber Interfaces
615