Limit and track MAC address movement for all VLANs in a routing instance

You can limit and track the number of times a MAC address moves to a new interface within a second by configuring MAC move limiting feature. If the MAC address movement exceeds the configured limit then an action can be configured, where the incoming packets can be ignored, dropped, logged, or can also be configured to shut down the interface. If you configure MAC move limit and packet-action at the routing-instance level, then the configuration also applies to all the VLANS within that routing instance. To configure MAC move limits at the default routing-instance level, use the following configuration: user@host# set switch-options mac-move-limit limit packet-action action To configure MAC move limits at a user-defined routing-instance level, use the following configuration: user@host# set routing-instances routing-instance switch-options mac-move-limit limit packetaction action If you configure MAC move limit at the VLAN level, then the VLAN's MAC move limit and its packet action takes precedence over the routing-instance's MAC move limit and packet-action. If a packet action is not configured at the VLAN level, then the VLAN uses the packet-action as None rather than inheriting the one configured at the routing-instance level. If you do not want the VLAN to inherit the routing instance's MAC move limit properties and actions, then you need to disable MAC move limit at the VLAN level. This ensures the VLAN does not inherit the routing-instance's configured MAC move limits and all the MAC address movements will be ignored. To disable MAC move limit for a VLAN in the default routing-instance level, use the following configuration: user@host# set vlan vlan-name switch-options mac-move-limit none To disable MAC move limit for a VLAN in a user-defined routing-instance level, use the following configuration: user@host# set routing-instances routing-instance vlan vlan-name switch-options mac-movelimit none You can track the MAC address movement limits applicable for each VLAN by using the following commands: user@host> show vlans extensive user@host> show vlans <vlan-name > extensive