Juniper 07 DHCP Snooping, Dynamic ARP inspection, IP source guard
Настройка на серии EX DHCP Snooping, Dynamic ARP inspection, IP source guard
set ethernet-switching-options secure-access-port interface ge-0/1/0.0 dhcp-trusted
set ethernet-switching-options secure-access-port interface ge-0/1/1.0 dhcp-trusted
set ethernet-switching-options secure-access-port interface ge-0/0/1.0 no-dhcp-trusted
set ethernet-switching-options secure-access-port interface ge-0/0/0.0 no-dhcp-trusted
set ethernet-switching-options secure-access-port interface ge-0/0/1.0 static-ip 10.10.2.11 vlan 102
set ethernet-switching-options secure-access-port interface ge-0/0/1.0 static-ip 10.10.2.11 mac ac:4b:c8:c8:9e:c4
set ethernet-switching-options secure-access-port vlan VLAN_101 examine-dhcp
set ethernet-switching-options secure-access-port vlan VLAN_102 examine-dhcp
show dhcp snooping binding
set ethernet-switching-options secure-access-port vlan VLAN_101 arp-inspection
set ethernet-switching-options secure-access-port vlan VLAN_102 arp-inspection
show dhcp snooping binding
show arp inspection stat
set ethernet-switching-options secure-access-port vlan VLAN_102 ip source-guard
set ethernet-switching-options secure-access-port vlan VLAN_101 ip source-guard
run show dhcp snooping binding
run show ip-source-guard .
Comments are closed.