Preventing IP Spoofing

You can prevent IP spoofing on subscriber interfaces by using media access control (MAC) address validation.

For information about configuring MAC address validation, see the MAC Address Validation section in JUNOSe IP, IPv6, and IGP Configuration Guide.

For information about the relationship between the MAC address validation state and dynamically created subscriber interfaces, see Inheritance of MAC Address Validation State for Dynamic Subscriber Interfaces.