Juniper JUNOSE 11.0.X MULTICAST ROUTING, Configuration Manual

Page: 649 / 788

created from this primary IP interface after you change the MAC address
validation state inherit the new MAC validation state.
■
When you configure a dynamic subscriber interface with one or more framed
routes (subnets), we recommend that you use the
ip mac-validate loose
command to configure MAC address validation for the static primary IP interface.
Using the
loose keyword, which is the default, prevents the router from discarding
packets with an IP source address from a subnet.
■
Because enabling MAC address validation on an IP interface creates a static MAC
address validation entry in the router’s ARP table, be sure to observe the system
limit for the maximum number of dynamic ARP table entries supported per line
module. See the Link Layer Maximums tables in
Appendix A , System Maximums ,
of the Release Notes corresponding to your software release for information about
the maximum number of dynamic ARP entries that the router supports. Currently,
this limit is set to 32,768 dynamic ARP entries for all E Series modules that
support Ethernet interfaces.
Verification of MAC Address Validation State Inheritance
To verify inheritance of the MAC address validation state on a dynamic subscriber
interface, you can use the
show ip mac-validate interface command and the
show arp command.
The following sample output from the show ip mac-validate interface command
displays the MAC address validation state (strict) inherited by the dynamic subscriber
interface ip74.39.64.3 from its parent static primary IP interface.
host1# show ip mac-validate interface ip74.39.64.3
ip74.39.64.3: Strict
Address Hardware Addr
74.39.64.3 0090.1a40.f4f6
Building on this example, the following sample output from the show arp command
displays a static MAC address validation entry (74.39.64.3) in the ARP table for the
dynamic subscriber interface when it is created with the MAC address validation
state inherited from its parent static primary IP interface. The asterisk (*) indicates
that the ARP entry was added as the result of issuing an
arp validate command
rather than an arp command.
host1# show arp
Address Age Hardware Addr Interface
10.13.10.1 21600 0090.6939.751b FastEthernet6/0
74.39.64.3 - 0090.1a40.f4f6 ip74.39.64.3 *
192.168.1.2 20700 0090.1a40.280d FastEthernet8/2
Configuring Static Subscriber Interfaces
You can configure static subscriber interfaces on ATM, Fast Ethernet, Gigabit Ethernet,
10-Gigabit Ethernet, or POS layer 2 interfaces.
The examples in this section show how to configure static subscriber interfaces on
a Fast Ethernet interface, but the steps for configuring static subscriber interfaces
over other supported layer 2 interface types are similar.
Configuring Static Subscriber Interfaces
■ 609
Chapter 25: Configuring Subscriber Interfaces