On 08/05/13 15:06, "Rolf Hanßen" wrote: > What exactly does "l2-src" check ? I doubt it does anything on sup720/sup2t. It might work for CPU-forwarded/punted packets, but it's doubtful Earl7/Earl8 support comparison of source-mac in the hardware forwarding path.