Re: Srx210 DHCP mac address block

Hello,

You can try something like this:

https://www.juniper.net/techpubs/en_US/junos11.1/topics/example/layer-2-vlans-firewall-filters-filtering-frames-by-mac-address-mx-solutions.html

This will block certain source MAC on SRX.

Otherwise straightforward option is to configure allowed-mac & rest all will be blocked.

set interface ge–0/0/2 allowed-mac xx:xx:xx:xx:xx:xx

set interface ge–0/0/2 allowed-mac xx:xx:xx:xx:xx:xx

set interface ge–0/0/2 allowed-mac xx:xx:xx:xx:xx:xx

Regards,

Rushi