Supported Platforms
Related Documentation
- EX, QFX Series, QFabric System
- Understanding MAC Limiting and MAC Move Limiting for Port Security
- Configuring MAC Limiting
- Configuring MAC Move Limiting (CLI Procedure)
- mac-limit
- no-allowed-mac-log
allowed-mac
Syntax
Hierarchy Level
Release Information
Statement introduced in Junos OS Release 11.1 for the QFX Series.
Description
Specify particular MAC addresses to be added to the MAC address cache.
 | Note: Although this configuration restricts the addresses that can be added to the MAC address cache, it does not block the switch from receiving Layer 2 control packets—such as Link Layer Discovery Protocol (LLDP) packets—transmitted from MAC addresses that are not specified in the list of allowed MAC addresses. Control packets do not undergo the MAC address check, and they are therefore included in the statistics of packets received, though, they are not forwarded to another destination. |
Default
Allowed MAC addresses take precedence over dynamic MAC values. For example, if the mac-limit statement is set to four and three allowed MACs are configured, only one dynamic MAC can be learned on that interface.
Options
mac-address-list—One or more MAC addresses configured as allowed MAC addresses for a specified interface or all interfaces.
Required Privilege Level
routing—To view this statement in the
configuration.
routing–control—To add this
statement to the configuration.
Related Documentation
- EX, QFX Series, QFabric System
- Understanding MAC Limiting and MAC Move Limiting for Port Security
- Configuring MAC Limiting
- Configuring MAC Move Limiting (CLI Procedure)
- mac-limit
- no-allowed-mac-log
Modified: 2017-12-20
Supported Platforms
Related Documentation
- EX, QFX Series, QFabric System
- Understanding MAC Limiting and MAC Move Limiting for Port Security
- Configuring MAC Limiting
- Configuring MAC Move Limiting (CLI Procedure)
- mac-limit
- no-allowed-mac-log
