source-address-filter

Syntax

source-address-filter mac-address ;

Hierarchy Level

Release Information

Statement modified in Release 9.0 of Junos OS.

Description

For redundant Ethernet interfaces, specify the MAC addresses from which the interface can receive packets. For this statement to have any effect, you must include the source-filtering statement in the configuration to enable source address filtering.

Be sure to update the MAC address if the remote Ethernet card is replaced. Replacing the interface card changes the MAC address. Otherwise, the interface cannot receive packets from the new card.

Options

mac-address —MAC address filter. You can specify the MAC address as six hexadecimal bytes in one of the following formats: nn:nn:nn:nn:nn:nn:nn (for example, 00:11:22:33:44:55) or nnnn:nnnn:nnnn (for example, 0011.2233.4455). You can configure up to 64 source addresses. To specify more than one address, include multiple mac-address options in the source-address-filter statement.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide. See also source-filtering.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.