• Download PDFs
• mac-limit  

• Related Topics
• allowed-mac
• Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC Move Limiting, on an EX-series Switch
• Example: Configuring Allowed MAC Addresses to Protect the Switch from DHCP Snooping Database Alteration Attacks
• Example: Configuring MAC Limiting, Including Dynamic and Allowed MAC Addresses, to Protect the Switch from Ethernet Switching Table Overflow Attacks
• Example: Configuring MAC Limiting to Protect the Switch from DHCP Starvation Attacks
• Configuring MAC Limiting (CLI Procedure)
• Configuring MAC Limiting (J-Web Procedure)

mac-limit

Syntax

Hierarchy Level

Release Information

Statement introduced in JUNOS Release 9.0 for EX-series switches.

The default value for the action option was changed in JUNOS Release 9.5 for EX-series switches.

Description

Number of MAC addresses to dynamically add to the MAC address cache for this interface (port) and action to be taken by the switch if the MAC address learning limit is reached on the interface (port).

Default

The default action is drop.

Options

limit—Maximum number of MAC addresses.

action action—(Optional) Action to take when the MAC address limit is reached:

• drop—Drop the packet and generate an alarm, an SNMP trap, or a system log entry . This is the default.
• log—Do not drop the packet but generate an alarm, an SNMP trap, or a system log entry.
• none—No action.
• shutdown—Block data traffic on the interface and generate an alarm.

Required Privilege Level

routing—To view this statement in the configuration.
routing–control—To add this statement to the configuration.