Juniper Networks 10.4 Example:Configuring Filtering of Frames by MAC Address

4. Applythe firewall filter as an input filterto the customer interface at ge-2/1/0:
[editinterfaces]
ge-2/1/0{
vlan-tagging;
encapsulationflexible-ethernet-services;
unit5 {
encapsulationvlan-vpls;
vlan-id9;
familyvpls {
filter{
inputcustomer-1;
}
}
}
}
Related
Documentation
MXSeries Ethernet Services Routers SolutionsPage•
•FirewallFilters for Bridge Domains and VPLS Instanceson page 95
•Example:Configuring Filtering of Frames by MACAddress on page 98
•Example:Configuring Filtering of Frames by IEEE 802.1pBits on page 99
•Example:Configuring Filtering of Frames by PacketLoss Priority on page 101
Example:Configuring Filtering of Frames by MAC Address
Thisexample firewall filter finds frameswith a certain source MAC address
(88:05:00:29:3c:de/48),then counts and silentlydiscards them. For more information
aboutconfiguring firewall filter match conditions,see the Junos OS Policy Framework
ConfigurationGuide. The filter is applied to the VLAN configuredas vlan100200 as an
inputfilter on Router 1.
NOTE: Thisexample does not present exhaustiveconfiguration listings for
allrouters in the figures. However,you can use this example with a broader
configurationstrategy tocomplete the MX Series router network Ethernet
Operations,Administration, and Maintenance (OAM)configurations.
Toconfigure filteringof frames by MAC address:
1. Configureevil-mac-address, the firewall filter:
[editfirewall]
familybridge {
filterevil-mac-address {
termone {
from{
source-mac-address88:05:00:29:3c:de/48;
}
then{
Copyright© 2010, Juniper Networks,Inc.98
Junos10.4 MX Series Ethernet ServicesRouters Solutions Guide