- Download
Software
- Research a
Problem - Case Management
- Communities and Forums
- Contract & Product Management
- Technical Documentation Advanced Search
- Documentation Feedback Form
- Documentation Symbols Key
- End-of-Life Products
- Guidelines and Policies
- Security Resources
Juniper was the first North American IP routing vendor to achieve the prestigious TL 9000 certification by the Quality of Excellence for Suppliers of Telecommunications (QuEST) Forum in the router category, for design, development, provision and service and support.
What is J-Care?
It's the world-class service and support that you expect from a company that delivers the industry's best infrastructure and security products. With J-Care, you now have the confidence knowing that Juniper will do our part to keep you on top of the world!
- Download PDFs
-
Configuring MAC Move Limiting on a VLAN (CLI Procedure)
- Related Topics
- Configuring MAC Move Limiting on a VLAN (J-Web Procedure)
- Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC Move Limiting, on an EX-series Switch
- Verifying That MAC Move Limiting Is Working Correctly
- Monitoring Port Security
- Understanding MAC Limiting and MAC Move Limiting for Port Security on EX-series Switches
Configuring MAC Move Limiting on a VLAN (CLI Procedure)
MAC move limiting detects MAC address movement and MAC address spoofing on access ports. It prevents hosts whose MAC addresses have not been learned by the switch from accessing the network.
You configure MAC move limiting for each VLAN, not for each interface (port). In the default configuration, the MAC move limit for each VLAN is unlimited. The default action that the switch will take if a limit is set and then that limit is exceeded is none.
To configure a MAC move limit on a specific VLAN or on all VLANs, using the CLI:
- On a single VLAN (here, the VLAN is employee-vlan):
[edit ethernet-switching-options secure-access-port]
user@switch# set vlan employee–vlan mac-move-limit 5 action drop - On all VLANs:
[edit ethernet-switching-options secure-access-port]
set vlan all mac–move-limit 5 action drop