Dell PowerConnect J-EX4200-24T Software Manual page 2660

Dell PowerConnect J-Series Ethernet Switch Complete Software Guide for Junos OS
Table 325: Components of the Port Security Topology (continued)
Properties
VLAN subnets
Interfaces in
employee-vlan
Interface for DHCP server
Configuration
CLI Quick
Configuration
Step-by-Step
Procedure
Results
2588
Settings
192.0.2.16/28
192.0.2.17
192.0.2.31
ge-0/0/1
ge-0/0/8
In this example, the switch has already been configured as follows:
Secure port access is activated on the switch.
DHCP snooping is disabled on the VLAN
All access ports are untrusted, which is the default setting.
To configure DHCP snooping and dynamic ARP inspection (DAI) to protect the switch
against ARP attacks:
To quickly configure DHCP snooping and dynamic ARP inspection (DAI), copy the following
commands and paste them into the switch terminal window:
[edit ethernet-switching-options secure-access-port]
set interface ge-0/0/8 dhcp-trusted
set vlan employee-vlan examine-dhcp
set vlan employee-vlan arp-inspection
Configure DHCP snooping and dynamic ARP inspection (DAI) on the VLAN:
Set the ge-0/0/8 interface as trusted:
1.
[edit ethernet-switching-options secure-access-port]
user@switch# set interface ge-0/0/8 dhcp-trusted
Enable DHCP snooping on the VLAN:
2.
[edit ethernet-switching-options secure-access-port]
user@switch# set vlan employee-vlan examine-dhcp
Enable DAI on the VLAN:
3.
[edit ethernet-switching-options secure-access-port]
user@switch# set vlan employee-vlan arp-inspection
Check the results of the configuration:
[edit ethernet-switching-options secure-access-port]
user@switch# show
interface ge-0/0/8.0 {
dhcp-trusted;
}
vlan employee-vlan {
through 192.0.2.30
is subnet's broadcast address
, , ,
ge-0/0/2 ge-0/0/3 ge-0/0/8
employee-vlan
.