- One mac address locked per port
 - "Learning" disabled
 - Rate limits applied for broadcast / unknown mac traffic
 - IRR and RPKI filtered route servers
- Bogons and martians filtered
 - Transit-Free networks filtered
 
 - IRR objects for BGP-RS service
 - Unwanted frames filtered 
 - Peering LAN has ASO ROA
 
 If you're looking for something specific, please reach out to our ops team.  We are always trying to do better.