Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


source-address-filter (Interfaces)


Hierarchy Level


For redundant Ethernet interfaces, specify the MAC addresses from which the interface can receive packets. For this statement to have any effect, you must include the source-filtering statement in the configuration to enable source address filtering.

Be sure to update the MAC address if the remote Ethernet card is replaced. Replacing the interface card changes the MAC address. Otherwise, the interface cannot receive packets from the new card.

  • Software based MAC limiting is supported on SRX300, SRX320, and SRX340 devices.

    A maximum of 32 devices are supported per device.


mac-address —MAC address filter. You can specify the MAC address as six hexadecimal bytes in one of the following formats: nn:nn:nn:nn:nn:nn:nn (for example, 00:11:22:33:44:55) or nnnn:nnnn:nnnn (for example, 0011.2233.4455). You can configure up to 64 source addresses. To specify more than one address, include multiple mac-address options in the source-address-filter statement.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Release Information

Statement modified in Junos OS Release 9.2.