Enabling A Trusted Dhcp Server (J-Web Procedure) - Juniper JUNOS OS 10.3 - SOFTWARE Manual

Complete Software Guide for Junos
Enabling a Trusted DHCP Server (CLI Procedure)
Related
Documentation

Enabling a Trusted DHCP Server (J-Web Procedure)

2912
®
OS for EX Series Ethernet Switches, Release 10.3
You can configure any interface on the EX Series switch that connects to a DHCP server
as a trusted interface (port). Configuring a DHCP server on a trusted interface protects
against rogue DHCP servers sending leases.
You configure a trusted DHCP server on an interface, not on a VLAN. By default, all access
interfaces are untrusted and all trunk interfaces are trusted.
To configure a trusted interface for a DHCP server by using the CLI (here, the interface
is ):
ge-0/0/8
[edit ethernet-switching-options secure-access port]
user@switch# set interface ge–0/0/8 dhcp-trusted
Enabling a Trusted DHCP Server (J-Web Procedure) on page 2912
Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC
Move Limiting, on an EX Series Switch on page 2849
Example: Configuring a DHCP Server Interface as Untrusted to Protect the Switch from
Rogue DHCP Server Attacks on page 2859
Verifying That a Trusted DHCP Server Is Working Correctly on page 2935
Monitoring Port Security on page 2933
Understanding Trusted DHCP Servers for Port Security on EX Series Switches on
page 2840
You can configure any interface on the EX Series switch that connects to a DHCP server
as a trusted interface (port). Configuring a DHCP server on a trusted interface protects
against rogue DHCP servers sending leases.
You configure a trusted DHCP server on an interface, not on a VLAN. By default, all access
interfaces are untrusted and all trunk interfaces are trusted.
To enable a trusted DHCP server on one or more interfaces by using the J-Web interface:
Select
1. Configure>Security>Port Security
Select one or more interfaces from the Port list.
2.
Click the Edit button. If a message appears asking if you want to enable port security,
3.
click .
Yes
Select the
Trust DHCP
4.
Click OK after the command has been successfully delivered.
5.
.
check box and then click
OK
.
Copyright © 2010, Juniper Networks, Inc.