source-filtering

Syntax

(source-filtering | no-source-filtering);

Hierarchy Level

Release Information

Statement modified in Release 9.0 of Junos OS.

Description

For redundant Ethernet interfaces, enable the filtering of MAC source addresses, which blocks all incoming packets to that interface. To allow the interface to receive packets from specific MAC addresses, include the source-address-filter statement.

If the remote Ethernet card is changed, the interface cannot receive packets from the new card because it has a different MAC address.

By default, source address filtering is disabled.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide. See also source-address-filter.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.