Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary
Navigation

source-address-filter

Syntax

source-address-filter {mac-address;}

Hierarchy Level

[edit interfaces interface-name aggregated-ether-options], [edit interfaces interface-name fastether-options], [edit interfaces interface-name gigether-options]

Release Information

Statement introduced before Junos OS Release 7.4.

Statement introduced in Junos OS Release 12.1 for PTX Packet Transport Switches.

Description

For aggregated Ethernet, Fast Ethernet, Gigabit Ethernet, Gigabit Ethernet IQ interfaces, and Gigabit Ethernet PICs with SFPs (except the 10-port Gigabit Ethernet PIC and the built-in Gigabit Ethernet port on the M7i router), specify the MAC addresses from which the interface can receive packets. For this statement to have any effect, you must include the source-filtering statement in the configuration to enable source address filtering. This statement is not supported on the J Series Services Routers.

Options

mac-address—MAC address filter. You can specify the MAC address as nn:nn:nn:nn:nn:nn or nnnn.nnnn.nnnn, where n is a decimal digit. To specify more than one address, include multiple mac-address options in the source-address-filter statement.

If you enable the VRRP on a Fast Ethernet or Gigabit Ethernet interface, as described in VRRP and VRRP for IPv6 Overview, and if you enable MAC source address filtering on the interface, you must include the virtual MAC address in the list of source MAC addresses that you specify in the source-address-filter statement. MAC addresses ranging from 00:00:5e:00:01:00 through 00:00:5e:00:01:ff are reserved for VRRP, as defined in RFC 3768, Virtual Router Redundancy Protocol. When you configure the VRRP group, the group number must be the decimal equivalent of the last hexadecimal byte of the virtual MAC address.

On untagged Gigabit Ethernet interfaces, you should not configure the source-address-filter statement and the accept-source-mac statement simultaneously. On tagged Gigabit Ethernet interfaces, you should not configure the source-address-filter statement and the accept-source-mac statement with an identical MAC address specified in both filters.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

 

Related Documentation

 

Published: 2012-12-11

Previous Page Next Page