Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 3193

Step-by-Step
Procedure
Results
Verification
Purpose
Action
Copyright © 2010, Juniper Networks, Inc.
[edit ethernet-switching-options secure-access-port]
set interface ge-0/0/1 mac-limit 3 action drop
set interface ge-0/0/2 mac-limit 3 action drop
Configure MAC limiting:
Configure a MAC limit of
1.
be dropped if the limit has been exceeded on the interface:
[edit ethernet-switching-options secure-access-port]
user@switch# set interface ge–0/0/1 mac-limit 3 action drop
Configure a MAC limit of
2.
be dropped if the limit has been exceeded on the interface:
[edit ethernet-switching-options secure-access-port]
user@switch# set interface ge-0/0/2 mac-limit 3 action drop
Check the results of the configuration:
[edit ethernet-switching-options secure-access-port]
user@switch# show
interface ge-0/0/1.0 {
mac-limit 3 action drop;
}
interface ge-0/0/2.0 {
mac-limit 3 action drop;
}
To confirm that the configuration is working properly:
Verifying That MAC Limiting Is Working Correctly on the Switch on page 3089
Verifying That MAC Limiting Is Working Correctly on the Switch
Verify that MAC limiting is working on the switch.
Send some DHCP requests from network devices (here they are DHCP clients) connected
to the switch.
Display the MAC addresses learned when DHCP requests are sent from hosts on
and from hosts on
ge-0/0/2
drop :
user@switch> show ethernet-switching table
Ethernet-switching table:
VLAN MAC address
default *
default 00:05:85:3A:82:77
default 00:05:85:3A:82:79
default 00:05:85:3A:82:80
default 00:05:85:3A:82:81
default 00:05:85:3A:82:83
Chapter 100: Examples: Port Security Configuration
on and specify that packets with new addresses
3 ge-0/0/1
on and specify that packets with new addresses
3 ge-0/0/2
, with both interfaces set to a MAC limit of
7 entries, 6 learned
Type
Flood
Learn
Learn
Learn
Learn
Learn
ge-0/0/1
with the action
3
Age Interfaces
- ge-0/0/2.0
0 ge-0/0/1.0
0 ge-0/0/1.0
0 ge-0/0/1.0
0 ge-0/0/2.0
0 ge-0/0/2.0
3089