Allowed-Mac - Juniper JUNOS OS 10.3 - SOFTWARE Manual

allowed-mac

Syntax
Hierarchy Level
Release Information
Description
Default
Options
Required Privilege
Level
Related
Documentation
Copyright © 2010, Juniper Networks, Inc.
allowed-mac {
mac-address-list;
}
[edit ethernet-switching-options secure-access-port interface (all | interface-name)]
Statement introduced in Junos OS Release 9.0 for EX Series switches.
Specify particular MAC addresses to be added to the MAC address cache.
NOTE: Although this configuration restricts the addresses that can be added
to the MAC address cache, it does not block the switch from receiving Layer
2 control packets—such as Link Layer Discovery Protocol (LLDP)
packets—transmitted from MAC addresses that are not specified in the list
of allowed MAC addresses. Control packets do not undergo the MAC address
check and they are therefore included in the statistics of packets received.
However, they are not forwarded to another destination. They are trapped
within the switch.
Allowed MAC addresses take precedence over dynamic MAC values that have been
applied with the
mac-limit
—One or more MAC addresses configured as allowed MAC addresses
mac-address-list
for a specified interface or all interfaces.
routing—To view this statement in the configuration.
routing–control—To add this statement to the configuration.
mac-limit on page 2964
Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC
Move Limiting, on an EX Series Switch on page 2849
Example: Configuring Allowed MAC Addresses to Protect the Switch from DHCP
Snooping Database Alteration Attacks on page 2870
Example: Configuring MAC Limiting, Including Dynamic and Allowed MAC Addresses,
to Protect the Switch from Ethernet Switching Table Overflow Attacks on page 2856
Example: Configuring MAC Limiting to Protect the Switch from DHCP Starvation Attacks
on page 2863
Configuring MAC Limiting (CLI Procedure) on page 2915
Configuring MAC Limiting (J-Web Procedure) on page 2917
Chapter 98: Configuration Statements for Port Security
statement.
2951