Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary
Navigation

Configuring MAC Filtering on PTX Series Packet Transport Routers

This topic describes how to configure MAC filtering on PTX Series Packet Transport Routers. MAC filtering enables you to specify the MAC addresses from which the Ethernet interface can receive packets.

MAC filtering support on PTX Series Packet Transport Routers includes:

  • MAC source and destination address filtering for each port.
  • MAC source address filtering for each physical interface.
  • MAC source address filtering for each logical interface.

When you filter logical and physical interfaces, you can specify up to 1000 MAC source addresses per port.

To configure MAC source address filtering for a physical interface, include the source-filtering and source-address-filter statements at the [edit interfaces et-fpc/pic/port gigether-options] hierarchy level:

[edit interfaces]et-x/y/z {
gigether-options {
source-filtering;source-address-filter {mac-address;}}}

The source-address-filter statement configures which MAC source addresses are filtered. The specified physical interface drops all packets from the MAC source addresses you specify. You can specify the MAC address as nn:nn:nn:nn:nn:nn where n is a decimal digit. To specify more than one address, include multiple mac-address options in the source-address-filter statement.

To configure MAC source address filtering for a logical interface, include the accept-source-mac statement at the [edit interfaces et-fpc/pic/port unit logical-unit-number] hierarchy level:

[edit interfaces]et-x/y/z {
gigether-options {
source-filtering;}unit logical-unit-number {accept-source-mac {mac-address mac-address;}}}

The accept-source-mac statement configures which MAC source addresses are accepted on the logical interface. You can specify the MAC address as nn:nn:nn:nn:nn:nn where n is a decimal digit. To specify more than one address, include multiple mac-address mac-address options in the accept-source-mac statement.

After an interface filter is configured, there is an accounting entry that is associated with the MAC address filter. Counters accumulate if there are packets with matching MAC source addresses. You can use the show interfaces mac-database Junos OS CLI command to view the address count.

 

Related Documentation

 

Published: 2013-07-18

Previous Page Next Page