Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    mac-move-limit

    Syntax

    mac-move-limit limit <fabric-limit limit> action action;

    Hierarchy Level

    For platforms without ELS:

    [edit ethernet-switching-options secure-access-port (all | vlan-name)]

    For platforms with ELS:

    [edit vlans vlan-nameswitch-options],

    Release Information

    Statement introduced in Junos OS Release 12.1 for the QFX Series.

    Description

    Specify the number of times a MAC address can move to a new interface (port) in
    1 second and the action to be taken by the switch if the MAC address move limit is exceeded.

    Caution: Mac move limiting does not work properly on a QFX5100 switch used as a Node device in a QFabric system. Do not use this feature on a QFX5100 switch in a QFabric system.

    Default

    The default move limit is unlimited. The default action is drop.

    Options

    fabric-limit—Specify the maximum number of moves in a QFabric system. If you do not specify a fabric limit, the value for mac-move-limit applies to the QFabric system.

    limit—Maximum number of moves to a new interface per second.

    action action—(Optional) Action to take when the MAC address move limit is reached:

    • drop—Drop the packet and generate an alarm, an SNMP trap, or a system log entry. This is the default.

    • log—Do not drop the packet but generate an alarm, an SNMP trap, or a system log entry.

    • none—No action.

    • shutdown—Logically disable the interface and generate a system log entry. If you have configured the switch with the port-error-disable statement, the disabled interfaces recover automatically upon expiration of the specified disable timeout. If you have not configured the switch for autorecovery from port error disabled conditions, you can bring up the disabled interfaces by running the clear-ethernet-switch-port command.

    Required Privilege Level

    system—To view this statement in the configuration.
    system–control—To add this statement to the configuration.

    Modified: 2018-03-14