Understanding Ip Source Guard For Port Security On Ex Series Switches - Juniper JUNOS OS 10.3 - SOFTWARE Manual

Related
Documentation

Understanding IP Source Guard for Port Security on EX Series Switches

Copyright © 2010, Juniper Networks, Inc.
for the switch-as-relay-agent; in this instance, the switch relays requests through a router
to the server.
Figure 67: Switch Relays DHCP Requests to Server
For the configuration shown in Figure 67 on page 2843, you set DHCP option 82 at the
forwarding-options helpers bootp]
Port Security for EX Series Switches Overview on page 2825
Example: Setting Up DHCP Option 82 on an EX Series Switch with No Relay Agent
Between Clients and DHCP Server on page 2898
Example: Setting Up DHCP Option 82 with an EX Series Switch as Relay Agent Between
Clients and a DHCP Server on page 2895
Setting Up DHCP Option 82 on the Switch with No Relay Agent Between Clients and
DHCP Server (CLI Procedure) on page 2929
Setting Up DHCP Option 82 with the Switch as a Relay Agent Between Clients and
DHCP Server (CLI Procedure) on page 2926
Ethernet LAN switches are vulnerable to attacks that involve spoofing (forging) of source
IP addresses or source MAC addresses. You can use the IP source guard access port
security feature on Juniper Networks EX Series Ethernet Switches to mitigate the effects
of these attacks.
IP Address Spoofing on page 2844
How IP Source Guard Works on page 2844
Chapter 93: Port Security Overview
hierarchy level.
[edit
2843