- Download
Software
- Research a
Problem - Case Management
- Communities and Forums
- Contract & Product Management
- Technical Documentation Advanced Search
- Documentation Feedback Form
- Documentation Symbols Key
- End-of-Life Products
- Guidelines and Policies
- Security Resources
Juniper was the first North American IP routing vendor to achieve the prestigious TL 9000 certification by the Quality of Excellence for Suppliers of Telecommunications (QuEST) Forum in the router category, for design, development, provision and service and support.
What is J-Care?
It's the world-class service and support that you expect from a company that delivers the industry's best infrastructure and security products. With J-Care, you now have the confidence knowing that Juniper will do our part to keep you on top of the world!
- Download PDFs
-
mac-limit
- Related Topics
- allowed-mac
- Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC Move Limiting, on an EX-series Switch
- Example: Configuring Allowed MAC Addresses to Protect the Switch from DHCP Snooping Database Alteration Attacks
- Example: Configuring MAC Limiting, Including Dynamic and Allowed MAC Addresses, to Protect the Switch from Ethernet Switching Table Overflow Attacks
- Example: Configuring MAC Limiting to Protect the Switch from DHCP Starvation Attacks
- Configuring MAC Limiting, Including Dynamic and Allowed MAC Addresses, on an Interface (CLI Procedure)
- Configuring MAC Limiting, Including Dynamic and Allowed MAC Addresses, on an Interface (J-Web Procedure)
mac-limit
Syntax
- mac-limit;
-
limit action action;
Hierarchy Level
- [edit ethernet-switching-options secure-access-port interface (all | interface-name)]
Release Information
Statement introduced in JUNOS Release 9.0 for EX-series switches.
Description
Number of MAC addresses to dynamically add to the MAC address cache for this interface (port) and action to be taken by the switch if the MAC address learning limit is reached on the interface (port).
Default
The default limit is 5 MAC addresses for each interface (port). The default action is no action (none).
Options
-
limit—Maximum number of MAC addresses.
-
action—Action to take when the MAC address limit is reached:
- none—No action. This is the default.
- drop—Drop the packet and generate an alarm, an SNMP trap, or a system log entry .
- log—Do not drop the packet but generate an alarm, an SNMP trap, or a system log entry.
- shutdown—Block data traffic on the interface and generate an alarm.
Required Privilege Level
routing—To view this statement in the
configuration.
routing–control—To add this
statement to the configuration.