Juniper JUNOS OS 10.3 - SOFTWARE Manual page 2990

Complete Software Guide for Junos
Meaning
Related
Documentation
2894
®
OS for EX Series Ethernet Switches, Release 10.3
Display the DHCP snooping information when the interface on which the DHCP server
connects to the switch is trusted. The following output results when requests are sent
from the MAC addresses and the server has provided the IP addresses and leases:
show dhcp snooping binding
user@switch>
DHCP Snooping Information:
MAC address IP address
00:05:85:3A:82:77 192.0.2.17
00:05:85:3A:82:79 192.0.2.18
00:05:85:3A:82:80 192.0.2.19
00:05:85:3A:82:81 192.0.2.20
vlan100 ge-0/0/13.0
00:30:48:8D:01:3D 10.10.10.9
00:30:48:8D:01:5D 10.10.10.8
00:11:11:11:11:11 11.1.1.1
00:05:85:27:32:88 192.0.2.22
00:05:85:27:32:89 192.0.2.23
00:05:85:27:32:90 192.0.2.27
View the IP source guard information for the data VLAN.
user@switch> show ip-source-guard
IP source guard information:
Interface Tag IP Address
ge-0/0/13.0 0 10.10.10.7
ge-0/0/14.0 0 10.10.10.9
ge-0/0/14.0 0 11.1.1.1
ge–0/0/13.0 100 *
When the interface on which the DHCP server connects to the switch has been set to
trusted, the output (see the preceding sample output for
shows, for each MAC address, the assigned IP address and lease time—that is, the time,
in seconds, remaining before the lease expires. Static IP addresses have no assigned
lease time. Statically configured entries never expire.
The IP source guard database table contains the VLANs enabled for IP source guard, the
untrusted access interfaces on those VLANs, the VLAN 802.1Q tag IDs if there are any,
and the IP addresses and MAC addresses that are bound to one another. If a switch
interface is associated with multiple VLANs and some of those VLANs are enabled for
IP source guard and others are not, the VLANs that are not enabled for IP source guard
have a star (*) in the
IP Address
VLAN in the preceding sample output.
Example: Configuring IP Source Guard with Other EX Series Switch Features to Mitigate
Address-Spoofing Attacks on Untrusted Access Interfaces on page 2880
Lease (seconds) Type
600 dynamic
653 dynamic
720 dynamic
932 dynamic
00:30:48:92:A5:9D 10.10.10.7
720 dynamic
1230 dynamic
— static
— static
— static
— static
MAC Address
00:30:48:92:A5:9D
00:30:48:8D:01:3D
00:11:11:11:11:11
*
and fields. See the entry for the
MAC Address
VLAN Interface
employee ge-0/0/1.0
employee ge-0/0/1.0
employee ge-0/0/2.0
employee ge-0/0/2.0
720 dynamic
data ge-0/0/14.0
voice ge-0/0/14.0
data ge-0/0/14.0
employee ge-0/0/17.0
employee ge-0/0/17.0
employee ge-0/0/17.0
VLAN
vlan100
data
data
voice
show dhcp snooping binding
voice
Copyright © 2010, Juniper Networks, Inc.
)