"
The dst mac addr may not be in the list in the filter:
78:fe:3d:32:1e:c3/48;
78:fe:3d:32:1e:db/48;
78:fe:3d:32:1e:dd/48;
I would suggest trying to identify the traffic src/dst IP & mac addresses and then apply a discard filter. The discard filter can be applied on IP addresses too instead of mac addresses.
You could use firewall log on a facing ingress interface or port mirroring to analyse.
Is the EX4200 connected to other switches with STP in operation blocking ports for loop prevention on either the EX4200 or the other switches?
"
1. I tried to add this mac to input filter ae0.0 (input at EX4200). I tried to add this mac to output filter ge-0/0/1 (flood affected port of EX4200).
example:
{master:0}[edit firewall family ethernet-switching filter trouble-ge-0-0-1]
admin# show
term arp {
from {
ether-type arp;
}
then accept;
}
term know {
from {
destination-mac-address {
00:10:f3:2a:a3:9c/48;
}
}
then accept;
}
term multicast {
from {
destination-address {
224.0.0.0/4;
}
}
then accept;
}
term deny-unknown-mac {
from {
destination-mac-address {
78:fe:3d:32:1e:c3/48;
78:fe:3d:32:1e:db/48;
78:fe:3d:32:1e:dd/48;
}
}
then discard;
}
term default {
then accept;
}No. Don't worked.
admin> show configuration firewall family ethernet-switching filter trouble-ge-0-0-1
term arp {
from {
ether-type arp;
}
then accept;
}
term know {
from {
destination-mac-address {
00:10:f3:2a:a3:9c/48;
}
}
then accept;
}
term multicast {
from {
destination-address {
224.0.0.0/4;
}
}
then accept;
}
term deny {
then discard;
}Worked.
Now, only this worked solution.
2) RSTP on.
at 4200:
admin> show spanning-tree bridge STP bridge parameters Context ID : 0 Enabled protocol : RSTP Root ID : 0.3c:8a:b0:d3:83:01 Root cost : 1000 Root port : ae0.0 Hello time : 2 seconds Maximum age : 20 seconds Forward delay : 15 seconds Message age : 1 Number of topology changes : 29 Time since last topology change : 3512 seconds Topology change initiator : ae0.0 Topology change last recvd. from : 3c:8a:b0:d3:83:0a Local parameters Bridge ID : 32768.78:fe:3d:32:1e:c1 Extended system ID : 0 Internal instance ID : 0
at 4550:
admin> show spanning-tree bridge STP bridge parameters Context ID : 0 Enabled protocol : RSTP Root ID : 0.3c:8a:b0:d3:83:01 Hello time : 2 seconds Maximum age : 20 seconds Forward delay : 15 seconds Message age : 0 Number of topology changes : 54 Time since last topology change : 3559 seconds Topology change initiator : ae3.0 Topology change last recvd. from : 00:23:34:8c:5c:9e Local parameters Bridge ID : 0.3c:8a:b0:d3:83:01 Extended system ID : 0 Internal instance ID : 0