Hello!
What is the best way to validate dynamic ARP entries on Juniper MX router interfaces. I know that I could make static IP-MAC entries, but that is not option for me. ARP entries must be dynamic. If new ARP entry appears it is compared with some kind IP-MAC binding whitelist. If ARP entry matches one of the list entry then packets are forwarded, otherwise packets are dropped. I found mac-validate option, but information is poor about creating profiles for this option. Would be glad to have a few code examples for this problem.
Thanks!
------------------------------
KRISTAPS
------------------------------