Juniper JUNOS OS 10.3 - SOFTWARE Manual page 2951

Meaning
Purpose
Action
Meaning
Copyright © 2010, Juniper Networks, Inc.
Ethernet-switching table:
VLAN MAC address
employee-vlan *
employee-vlan 00:05:85:3A:82:77
employee-vlan 00:05:85:3A:82:79
employee-vlan 00:05:85:3A:82:80
employee-vlan 00:05:85:3A:82:81
employee-vlan 00:05:85:3A:82:83
employee-vlan 00:05:85:3A:82:85
Now suppose packets have been sent from two of the hosts on
been moved to other interfaces more than 5 times in 1 second, with
to a MAC move limit of with the default action
5
Display the MAC addresses in the table:
user@switch> show ethernet-switching table
Ethernet-switching table:
VLAN MAC address
employee-vlan *
employee-vlan 00:05:85:3A:82:77
employee-vlan 00:05:85:3A:82:79
employee-vlan 00:05:85:3A:82:80
employee-vlan 00:05:85:3A:82:81
employee-vlan *
employee-vlan *
The first sample output shows that with a MAC limit of
address on ge-0/0/2 was not learned because it exceeded the MAC limit. The second
sample output shows that MAC addresses for three of the hosts on
learned, because the hosts had been moved back more than 5 times in one second.
Verifying That Allowed MAC Addresses Are Working Correctly on the Switch
Verify that allowed MAC addresses are working on the switch.
Display the MAC cache information after 5 allowed MAC addresses have been configured
on interface ge-0/0/2 :
user@switch> show ethernet-switching table
Ethernet-switching table:
VLAN MAC address
employee-vlan 00:05:85:3A:82:80
employee-vlan 00:05:85:3A:82:81
employee-vlan 00:05:85:3A:82:83
employee-vlan 00:05:85:3A:82:85
employee-vlan *
Because the MAC limit value for this interface has been set to
allowed addresses are learned.
Chapter 94: Examples: Port Security Configuration
7 entries, 6 learned
Type
Flood
Learn
Learn
Learn
Learn
Learn
Learn
.
drop
7 entries, 4 learned
Type
Flood
Learn
Learn
Learn
Learn
Flood
Flood
4
5 entries, 4 learned
Type
Learn
Learn
Learn
Learn
Flood
Age Interfaces
- ge-0/0/2.0
0 ge-0/0/1.0
0 ge-0/0/1.0
0 ge-0/0/2.0
0 ge-0/0/2.0
0 ge-0/0/2.0
0 ge-0/0/2.0
ge-0/0/2 after they have
employee-vlan
Age Interfaces
- ge-0/0/2.0
0 ge-0/0/1.0
0 ge-0/0/1.0
0 ge-0/0/2.0
0 ge-0/0/2.0
- ge-0/0/2.0
- ge-0/0/2.0
for each interface, the fifth MAC
were not
ge-/0/0/2
Age Interfaces
0 ge-0/0/2.0
0 ge-0/0/2.0
0 ge-0/0/2.0
0 ge-0/0/2.0
- ge-0/0/2.0
4 , only 4 of the 5 configured
set
2855