Example: Configuring Filtering Of Frames By Mac Address - Juniper JUNOS OS 10.4 Manual

Junos OS 12.1 MX Series 3D Universal Edge Routers Solutions Guide
Related
Documentation

Example: Configuring Filtering of Frames by MAC Address

98
from {
traffic-type [ broadcast unknown-unicast multicast ];
}
then policer bcast-unknown-unicast-non-ip-mcast-policer;
}
}
}
Apply the firewall filter as an input filter to the customer interface at
4.
[edit interfaces]
ge-2/1/0 {
vlan-tagging;
encapsulation flexible-ethernet-services;
unit 5 {
encapsulation vlan-vpls;
vlan-id 9;
family vpls {
filter {
input customer-1;
}
}
}
}
Layer 2 Firewall Filters
Firewall Filters for Bridge Domains and VPLS Instances on page 95
Example: Configuring Filtering of Frames by MAC Address on page 98
Example: Configuring Filtering of Frames by IEEE 802.1p Bits on page 99
Example: Configuring Filtering of Frames by Packet Loss Priority on page 101
This example firewall filter finds frames with a certain source MAC address
( 88:05:00:29:3c:de/48 ), then counts and silently discards them. For more information
about configuring firewall filter match conditions, see the
. The filter is applied to the VLAN configured as
Configuration Guide
input filter on Router 1.
NOTE: This example does not present exhaustive configuration listings for
all routers in the figures. However, you can use this example with a broader
configuration strategy to complete the MX Series router network Ethernet
Operations, Administration, and Maintenance (OAM) configurations.
To configure filtering of frames by MAC address:
Configure
evil-mac-address
1.
[edit firewall]
, the firewall filter:
Copyright © 2012, Juniper Networks, Inc.
ge-2/1/0 :
Junos OS Policy Framework
as an
vlan100200