Techniques are described that enable MAC (L2) address authentication within an L2 switching network, such as a metro transport network. Moreover, when used in an EVPN, the techniques provide fine grain policy control over the L2 switching network so as to enable carrier networks to specify and control topologies for transporting packet-based communications. Access routers of the EVPN communicate utilizes enhanced EVPN MAC route advertisements that include an additional attribute indicating a request that L2 network address(es) being advertised be validated by a network address authentication device. A route controller relays the EVPN MAC advertisement upon validation of the L2 networks address. Moreover, the route controller may utilize the EVPN MAC route advertisements to distribute MAC-level policies to control topologies and MAC learning within the EVPN and provide services such as per-MAC traffic quota limits.