When a L2 switch is initially connected to an Ethernet LAN, it has no information about the devices connected to the network. Learning is a process the switch uses to obtain the MAC addresses of nodes on the network. The switch stores all learned MAC address in the bridge table. To learn MAC addresses, the switch examines the Ethernet header information of all received frames from the LAN, looking for source MAC addresses of sending nodes. The switch places learned MAC addresses into its bridge table, along with two other pieces of information—the interface (or port) on which the traffic was received and the time when the MAC address was learned. The port information is used to forward traffic to its intended destination (forwarding mechanism) while the timestamp information is used to keep the bridge table up-to-date (aging mechanism). We discuss the forwarding and aging mechanisms in detail on subsequent pages in this section.
To disable MAC learning follows: Switch# set ethernet-switching-options interfaces ge-1/1/1.0 no-mac-learning
Flooding is a transparent mechanism used to deliver packets to unknown MAC addresses. If the bridging table has no entry for a particular destination MAC address or if the packet received is a broadcast or multicast packet, the switch floods the traffic out all interfaces except the interface on which it was received.
I dont find any specifc reason for only ICMP packets are dropped and not udp/tcp. Is the ICMP tarffic is to the same destination as udp/tcp?
-Python JNCIE 3X [SP|DC|ENT] JNCIP-SEC JNCDS 3X [ WAN | DC|SEC] JNCIS-Cloud JNCIS-DevOps CCIP ITIL #Please mark my solution as accepted if it helped, Kudos are appreciated as well.