Examine-Dhcp - Dell PowerConnect J-EX4200-24T Software Manual

examine-dhcp

Syntax
Hierarchy Level
Release Information
Description
Default
Required Privilege
Level
Related
Documentation
(examine-dhcp | no-examine-dhcp);
[edit ethernet-switching-options secure-access-port vlan (all | vlan-name)]
Statement introduced before Junos OS Release 10.2 for J-EX Series switches.
Enable DHCP snooping on all VLANs or on the specified VLAN.
—Enable DHCP snooping.
examine-dhcp
—Disable DHCP snooping.
no-examine-dhcp
When DHCP snooping is enabled, the switch logs DHCP packets (DHCPOFFER,
DHCPDECLINE, DHCPACK, and DHCPNAK packets) that it receives on untrusted ports.
You can monitor the log for these messages, which can signal the presence of a malicious
DHCP server on the network.
TIP: For Private VLANs (PVLANs), enable DHCP snooping on the primary
VLAN. If you enable DHCP snooping only on a community VLAN, DHCP
messages coming from PVLAN trunk ports are not snooped.
Disabled.
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.
Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC
Move Limiting, on a J-EX Series Switch on page 2569
Example: Configuring DHCP Snooping, DAI , and MAC Limiting on a J-EX Series Switch
with Access to a DHCP Server Through a Second Switch on page 2593
Example: Configuring DHCP Snooping and DAI to Protect the Switch from ARP Spoofing
Attacks on page 2586
Enabling DHCP Snooping (CLI Procedure) on page 2630
Enabling DHCP Snooping (J-Web Procedure) on page 2631
Chapter 98: Configuration Statements for Port Security
2681