source-address-filter

Syntax

source-address-filter {
    mac-address;
}

Hierarchy Level

[edit interfaces interface-name aggregated-ether-options],
[edit interfaces interface-name fastether-options],
[edit interfaces interface-name gigether-options]

Description

For aggregated Ethernet, Fast Ethernet, and Gigabit Ethernet interfaces only, specify the MAC addresses from which the interface can receive packets. For this statement to have any effect, you must include the source-filtering statement in the configuration to enable source address filtering.

Options

mac-address—MAC address filter. You can specify the MAC address as nn:nn:nn:nn:nn:nn or nnnn.nnnn.nnnn, where n is a decimal digit. To specify more than one address, include multiple mac-address options in the source-address-filter statement.

If you enable Virtual Router Redundancy Protocol (VRRP) on a Fast or Gigabit Ethernet interface, as described in Configure VRRP, and if you enable MAC source address filtering on the interface, you must include the virtual MAC address in the list of source MAC addresses that you specify in the source-address-filter statement. MAC addresses ranging from 00:00:5e:00:01:00 through 00:00:5e:00:01:ff are reserved for VRRP, as defined in RFC 2338. When you configure the VRRP group, the group number must be the decimal equivalent of the last hexadecimal byte of the virtual MAC address.

Usage Guidelines

See Configure MAC Address Filtering.

Required Privilege Level

interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.

See Also

source-filtering