Verifying That Dhcp Snooping Is Working Correctly - Juniper JUNOS OS 10.3 - SOFTWARE Manual

Complete Software Guide for Junos
Related
Documentation

Verifying That DHCP Snooping Is Working Correctly

Purpose
Action
Meaning
2934
®
OS for EX Series Ethernet Switches, Release 10.3
ARP Inspection—Displays the ARP inspection details for all interfaces. The information
includes details of the number of packets that passed ARP inspection and the number
of packets that failed the inspection. The pie chart graphically represents these statistics
when you select an interface. To view ARP inspection statistics for a specific interface,
select the interface from the list.
You have the following options on the page:
Clear ALL—Clears the DHCP snooping database, either for all VLANs if the option
has been selected in the Select VLANs list or for the specific VLAN that has been
selected in that list.
Clear—Deletes a specific IP address from the DHCP snooping database.
To clear ARP statistics on the page, click
Use the CLI commands to show and clear DHCP snooping database and ARP inspection
statistics details.
Configuring Port Security (CLI Procedure) on page 2906
Configuring Port Security (J-Web Procedure) on page 2907
Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC
Move Limiting, on an EX Series Switch on page 2849
Verify that DHCP snooping is working on the switch and that the DHCP snooping database
is correctly populated with both dynamic and static bindings.
Send some DHCP requests from network devices (here they are DHCP clients) connected
to the switch.
Display the DHCP snooping information when the interface on which the DHCP server
connects to the switch is trusted. The following output results when requests are sent
from the MAC addresses and the server has provided the IP addresses and leases:
show dhcp snooping binding
user@switch>
DHCP Snooping Information:
MAC address IP address
00:05:85:3A:82:77 192.0.2.17
00:05:85:3A:82:79 192.0.2.18
00:05:85:3A:82:80 192.0.2.19
00:05:85:3A:82:81 192.0.2.20
00:05:85:3A:82:83 192.0.2.21
00:05:85:27:32:88 192.0.2.22
When the interface on which the DHCP server connects to the switch has been set to
trusted, the output (see preceding sample) shows, for each MAC address, the assigned
in the ARP Statistics section.
Clear All
Lease (seconds) Type
600 dynamic
653 dynamic
720 dynamic
932 dynamic
1230 dynamic
— static
Copyright © 2010, Juniper Networks, Inc.
ALL
VLAN Interface
employee ge-0/0/1.0
employee ge-0/0/1.0
employee ge-0/0/2.0
employee ge-0/0/2.0
employee ge-0/0/2.0
data ge-0/0/4.0