Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 2969 / 3946

Verifying That Allowed MAC Addresses Are Working Correctly on the Switch
Purpose Verify that allowed MAC addresses are working on the switch.
Action Display the MAC cache information:
user@switch> show ethernet-switching table
Ethernet-switching table: 6 entries, 5 learned
VLAN MAC address Type Age Interfaces
employee-vlan 00:05:85:3A:82:80 Learn 0 ge-0/0/2.0
employee-vlan 00:05:85:3A:82:81 Learn 0 ge-0/0/2.0
employee-vlan 00:05:85:3A:82:83 Learn 0 ge-0/0/2.0
employee-vlan 00:05:85:3A:82:85 Learn 0 ge-0/0/2.0
employee-vlan 00:05:85:3A:82:88 Learn 0 ge-0/0/2.0
employee-vlan * Flood - ge-0/0/2.0
Meaning The output shows that the five MAC addresses configured as allowed MAC addresses
have been learned and are displayed in the MAC cache. The last MAC address in the list,
one that had not been configured as allowed, has not been added to the list of learned
addresses.
Related
Documentation
Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC
Move Limiting, on an EX Series Switch on page 2849
•
•
Configuring MAC Limiting (CLI Procedure) on page 2915
•
Configuring MAC Limiting (J-Web Procedure) on page 2917
Example: Configuring DHCP Snooping, DAI , and MAC Limiting on an EX Series Switch
with Access to a DHCP Server Through a Second Switch
You can configure DHCP snooping, dynamic ARP inspection (DAI), and MAC limiting on
the access interfaces of EX Series switches to protect the switch and the Ethernet LAN
against address spoofing and Layer 2 denial-of-service (DoS) attacks. To obtain those
basic settings, you can use the switch's default configuration for port security, configure
the MAC limit, and enable DHCP snooping and DAI on a VLAN. You can configure those
features when the DHCP server is connected to a different switch from the one to which
the DHCP clients (network devices) are connected.
This example describes how to configure port security features on an EX Series switch
whose hosts obtain IP addresses and lease times from a DHCP server connected to a
second switch:
• Requirements on page 2874
• Overview and Topology on page 2874
•
Configuring a VLAN, Interfaces, and Port Security Features on Switch 1 on page 2876
•
Configuring a VLAN and Interfaces on Switch 2 on page 2878
• Verification on page 2879
2873 Copyright © 2010, Juniper Networks, Inc.
Chapter 94: Examples: Port Security Configuration