Technical Documentation

Configuring MAC Address Validation for Subscriber Interfaces

This topic describes how to configure MAC address validation for subscriber interfaces in dynamic profiles on MX Series routers.

The subscriber interfaces can be statically created and associated with a dynamic profile (for example, VLAN interfaces) or dynamically created in the dynamic profile (such as demux interfaces).

By default, MAC address validation is disabled.

This topic contains the following sections:

Configuring MAC Address Validation for Static Subscriber Interfaces

This topic describes how to configure MAC address validation for static subscriber interfaces in dynamic profiles on MX Series routers.

Before you begin:

To configure MAC address validation on static subscriber interfaces:

  1. Configure the static VLAN interface.
    [edit interfaces]user@host# set fe-0/0/0 unit 0 family inet
  2. Configure the type of MAC address validation for the interface.
    • To configure loose validation:
      [edit interfaces fe-0/0/0 unit 0 family inet] user@host# set mac-validate loose
    • To configure strict validation:
      [edit interfaces fe-0/0/0 unit 0 family inet] user@host# set mac-validate strict

After you configure MAC address validation:

Configuring MAC Address Validation for Dynamic Subscriber Interfaces

This topic describes how to configure MAC address validation for subscriber interfaces created on demux interfaces in dynamic profiles on MX Series routers.

When you configure MAC address validation for demux interfaces in a dynamic profile and specify either loose or strict validation, the resulting behavior is always loose validation. To enable strict behavior for a dynamic IP demux interface, you must configure strict validation for the underlying interface.

Before you begin:

To configure MAC address validation for a dynamic subscriber interface:

  1. Configure loose validation for the demux interface.
    [edit dynamic-profiles interfaces unit “$junos-interface-unit” family inet] user@host# set mac-validate loose
  2. (Optional) Configure strict validation for the underlying interface.
    [edit interfaces fe-0/0/0 unit 0 family inet] user@host# set mac-validate strict

Published: 2010-04-15