Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Example: Configuring Filtering of Frames by MAC Address

This example firewall filter finds frames with a certain source MAC address (88:05:00:29:3c:de/48), then counts and silently discards them. For more information about configuring firewall filter match conditions, see the Routing Policies, Firewall Filters, and Traffic Policers User Guide. The filter is applied to the VLAN configured as vlan100200 as an input filter on Router 1.


This example does not present exhaustive configuration listings for all routers in the figures. However, you can use this example with a broader configuration strategy to complete the MX Series router network Ethernet Operations, Administration, and Maintenance (OAM) configurations.

To configure filtering of frames by MAC address:

  1. Configure evil-mac-address, the firewall filter:

  2. Apply evil-mac-address as an input filter to vlan100200 on Router 1: