Note:
This feature is supported only on the 7210 SAS-Mxp.
Operators deploy R-VPLS in enterprise networks on 7210 SAS nodes to provide Layer 2 and Layer 3 connectivity to end devices. To restrict access to the network, operators can use MAC ACLs to selectively allow traffic for specific MAC addresses and drop all other traffic, or vice versa.
Configure filter mac mac-filter-id in the config>service>vpls>sap>egress and config>service>vpls>sap>ingress contexts to associate an existing MAC filter policy with an R-VPLS service.
The following figure shows an example of an R-VPLS service that provides routed and bridging services to end devices connected to the enterprise LAN and that uses MAC ACLs to restrict traffic.
Figure: Secure access to network using MAC filter
