The RA guard feature is disabled by default. The Router Advertisement (RA) Guard functionality analyzes the RAs and filters out RA packets sent by unauthorized devices. You can enable or disable this functionality at an interface level. You can now filter the unauthorized devices to send the control packets, restrict the number of MACs allowed on the interface, and detect unwanted loops in the network when not running spanning-tree protocol. This release of ArubaOS Mobility Access Switch supports Port Security functionality which provides network security at Layer 2. The correct node for would be Use this node's alias or add a reasonable one yourself if missing.Īttention: Note that label MAC addresses are assigned relatively randomly by vendors, so label-mac-device should be regularly put into DTS files or DTSIs with few users, so it is not inherited by accident.Port Security Overview Port Security Overview If you find the label MAC address here, check your DTS for the corresponding parent node. There may be one, two or no paths giving the correct address. Valid choices are only mac-address or local-mac-address. It will give you a list like the each of the returned paths (if there are any), retrieve the mac-address, e.g.

To check whether there actually is a usable MAC address, check the device tree on your router:įind /proc/device-tree/ -name '*mac-address'Īttention: This will only work if you have already set up MAC addresses correctly based on the information retrieved above. Obviously, this is only valid if the 5 GHz Wifi device tree node actually has been named wifi0.Īttention: Not all interface can be referenced this way. For that purpose, one needs to reference the node with an alias, e.g. We can refer to the device bearing the label MAC address in DTS.

Mac address learning is not supported.