Configuring MAC Address Validation for Subscriber Interfaces
This topic describes how to configure MAC address validation for subscriber interfaces in dynamic profiles on MX Series routers.
The subscriber interfaces can be statically created and associated with a dynamic profile (for example, VLAN interfaces) or dynamically created in the dynamic profile (such as demux interfaces).
By default, MAC address validation is disabled.
This topic contains the following sections:
Configuring MAC Address Validation for Static Subscriber Interfaces
This topic describes how to configure MAC address validation for static subscriber interfaces in dynamic profiles on MX Series routers.
Before you begin:
- Configure the dynamic profile.
To configure MAC address validation on static subscriber interfaces:
- Configure the static VLAN interface. [edit interfaces]user@host# set fe-0/0/0 unit 0 family inet
- Configure the type of MAC address validation
for the interface.
- To configure loose validation:[edit interfaces fe-0/0/0 unit 0 family inet] user@host# set mac-validate loose
- To configure strict validation:[edit interfaces fe-0/0/0 unit 0 family inet] user@host# set mac-validate strict
- To configure loose validation:
After you configure MAC address validation:
- Associate the static VLAN interface with the dynamic profile.
See Associating Dynamic Profiles with Statically Created Interfaces.
Configuring MAC Address Validation for Dynamic Subscriber Interfaces
This topic describes how to configure MAC address validation for subscriber interfaces created on demux interfaces in dynamic profiles on MX Series routers.
When you configure MAC address validation for demux interfaces in a dynamic profile and specify either loose or strict validation, the resulting behavior is always loose validation. To enable strict behavior for a dynamic IP demux interface, you must configure strict validation for the underlying interface.
Before you begin:
- Configure the dynamic profile.
- Configure the dynamic IP demux interface.
See Configuring Dynamic Subscriber Interfaces Using IP Demux Interfaces in Dynamic Profiles.
To configure MAC address validation for a dynamic subscriber interface:
- Configure loose validation for the demux interface.[edit dynamic-profiles interfaces unit “$junos-interface-unit” family inet] user@host# set mac-validate loose
- (Optional) Configure strict validation
for the underlying interface.[edit interfaces fe-0/0/0 unit 0 family inet] user@host# set mac-validate strict
