Allowed-Mac - Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual

allowed-mac

Syntax
Hierarchy Level
Release Information
Description
Default
Options
Required Privilege
Level
Related
Documentation
Copyright © 2010, Juniper Networks, Inc.
allowed-mac {
mac-address-list;
}
[edit ethernet-switching-options secure-access-port interface (all | interface-name)]
Statement introduced in Junos OS Release 9.0 for EX Series switches.
Specify particular MAC addresses to be added to the MAC address cache.
NOTE: Although this configuration restricts the addresses that can be added
to the MAC address cache, it does not block the switch from receiving Layer
2 control packets—such as Link Layer Discovery Protocol (LLDP)
packets—transmitted from MAC addresses that are not specified in the list
of allowed MAC addresses. Control packets do not undergo the MAC address
check and they are therefore included in the statistics of packets received.
However, they are not forwarded to another destination. They are trapped
within the switch.
Allowed MAC addresses take precedence over dynamic MAC values that have been
applied with the mac-limit
—One or more MAC addresses configured as allowed MAC addresses
mac-address-list
for a specified interface or all interfaces.
system—To view this statement in the configuration.
system–control—To add this statement to the configuration.
mac-limit on page 3188
Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC
Move Limiting, on an EX Series Switch on page 3073
Example: Configuring Allowed MAC Addresses to Protect the Switch from DHCP
Snooping Database Alteration Attacks on page 3094
Example: Configuring MAC Limiting, Including Dynamic and Allowed MAC Addresses,
to Protect the Switch from Ethernet Switching Table Overflow Attacks on page 3080
Example: Configuring MAC Limiting to Protect the Switch from DHCP Starvation Attacks
on page 3087
Configuring MAC Limiting (CLI Procedure) on page 3139
Configuring MAC Limiting (J-Web Procedure) on page 3141
Chapter 104: Configuration Statements for Port Security
statement.
3175