Junos® OS Ethernet Interfaces Configuration ... - Juniper Networks

CHAPTER 11
Configuring MAC Address Validation on
Static Ethernet Interfaces
• MAC Address Validation on Static Ethernet Interfaces Overview on page 173
• Configuring MAC Address Validation on Static Ethernet Interfaces on page 174
• Disabling MAC Address Learning of Neighbors Through ARP or Neighbor Discovery for
IPv4 and IPv6 Neighbors on page 174
MAC Address Validation on Static Ethernet Interfaces Overview
Related
Documentation
Copyright © 2012, Juniper Networks, Inc.
MAC address validation enables the router to validate that received packets contain a
trusted IP source and an Ethernet MAC source address.
MAC address validation is supported on AE, Fast Ethernet, Gigabit Ethernet, and 10–Gigabit
Ethernet interfaces (with or without VLAN tagging) on MX Series routers only.
There are two types of MAC address validation that you can configure:
• Loose—Forwards packets when both the IP source address and the MAC source address
match one of the trusted address tuples.
Drops packets when the IP source address matches one of the trusted tuples, but the
MAC address does not support the MAC address of the tuple
Continues to forward packets when the source address of the incoming packet does
not match any of the trusted IP addresses.
• Strict—Forwards packets when both the IP source address and the MAC source address
•
match one of the trusted address tuples.
Drops packets when the MAC address does not match the tuple's MAC source address,
or when IP source address of the incoming packet does not match any of the trusted
IP addresses.
Configuring MAC Address Validation on Static Ethernet Interfaces on page 174
• Disabling MAC Address Learning of Neighbors Through ARP or Neighbor Discovery for
IPv4 and IPv6 Neighbors on page 174
• Junos® OS Ethernet Interfaces
173