Juniper-networks JUNOS OS 10.4 Manual do Utilizador descarregar pdf (Página 125)

To configure filtering of frames by MAC address:

Configure evil-mac-address, the firewall filter:

[edit firewall]

family bridge {

filter evil-mac-address {

term one {

from {

source-mac-address 88:05:00:29:3c:de/48;

}

then {

count evil-mac-address; # Counts frame with the bad source MAC address

discard;

}

term two {

then accept; # Make sure to accept other traffic

}

Apply evil-mac-address as an input filter to vlan100200 on Router 1:

[edit routing-instances]

virtual-switch-R1-1 {

bridge-domains {

vlan100200 {

domain-type bridge;

forwarding-options {

filter {

input evil-mac-address;

}

Documentation

Layer 2 Firewall Filters•

• Firewall Filters for Bridge Domains and VPLS Instances on page 101

• Example: Configuring Policing and Marking of Traffic Entering a VPLS Core on page 102

• Example: Configuring Filtering of Frames by IEEE 802.1p Bits on page 106

• Example: Configuring Filtering of Frames by Packet Loss Priority on page 107

Chapter 9: Layer 2 Firewall Filters

1 2 ... 120 121 122 123 124 125 126 127 128 129 130 ... 207 208

Sem comentários

Juniper-networks JUNOS OS 10.4 Manual do Utilizador Página 125