Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 2951 / 3946

Ethernet-switching table: 7 entries, 6 learned
VLAN MAC address Type Age Interfaces
employee-vlan * Flood - ge-0/0/2.0
employee-vlan 00:05:85:3A:82:77 Learn 0 ge-0/0/1.0
employee-vlan 00:05:85:3A:82:79 Learn 0 ge-0/0/1.0
employee-vlan 00:05:85:3A:82:80 Learn 0 ge-0/0/2.0
employee-vlan 00:05:85:3A:82:81 Learn 0 ge-0/0/2.0
employee-vlan 00:05:85:3A:82:83 Learn 0 ge-0/0/2.0
employee-vlan 00:05:85:3A:82:85 Learn 0 ge-0/0/2.0
Now suppose packets have been sent from two of the hosts on
ge-0/0/2
after they have
been moved to other interfaces more than 5 times in 1 second, with
employee-vlan
set
to a MAC move limit of
5
with the default action
drop
.
Display the MAC addresses in the table:
user@switch> show ethernet-switching table
Ethernet-switching table: 7 entries, 4 learned
VLAN MAC address Type Age Interfaces
employee-vlan * Flood - ge-0/0/2.0
employee-vlan 00:05:85:3A:82:77 Learn 0 ge-0/0/1.0
employee-vlan 00:05:85:3A:82:79 Learn 0 ge-0/0/1.0
employee-vlan 00:05:85:3A:82:80 Learn 0 ge-0/0/2.0
employee-vlan 00:05:85:3A:82:81 Learn 0 ge-0/0/2.0
employee-vlan * Flood - ge-0/0/2.0
employee-vlan * Flood - ge-0/0/2.0
Meaning The first sample output shows that with a MAC limit of
4
for each interface, the fifth MAC
address on
ge-0/0/2
was not learned because it exceeded the MAC limit. The second
sample output shows that MAC addresses for three of the hosts on
ge-/0/0/2
were not
learned, because the hosts had been moved back more than 5 times in one second.
Verifying That Allowed MAC Addresses Are Working Correctly on the Switch
Purpose Verify that allowed MAC addresses are working on the switch.
Action Display the MAC cache information after 5 allowed MAC addresses have been configured
on interface
ge-0/0/2
:
user@switch> show ethernet-switching table
Ethernet-switching table: 5 entries, 4 learned
VLAN MAC address Type Age Interfaces
employee-vlan 00:05:85:3A:82:80 Learn 0 ge-0/0/2.0
employee-vlan 00:05:85:3A:82:81 Learn 0 ge-0/0/2.0
employee-vlan 00:05:85:3A:82:83 Learn 0 ge-0/0/2.0
employee-vlan 00:05:85:3A:82:85 Learn 0 ge-0/0/2.0
employee-vlan * Flood - ge-0/0/2.0
Meaning Because the MAC limit value for this interface has been set to
4
, only 4 of the 5 configured
allowed addresses are learned.
2855 Copyright © 2010, Juniper Networks, Inc.
Chapter 94: Examples: Port Security Configuration