Arp-Inspection - Juniper JUNOS OS 10.3 - SOFTWARE Manual

Complete Software Guide for Junos

arp-inspection

Syntax
Hierarchy Level
Release Information
Description
Default
Required Privilege
Level
Related
Documentation
2952
®
OS for EX Series Ethernet Switches, Release 10.3
(arp-inspection | no-arp-inspection);
[edit ethernet-switching-options secure-access-port vlan (all | vlan-name)]
Statement introduced in Junos OS Release 9.0 for EX Series switches.
Perform dynamic ARP inspection (DAI) on all VLANs or on the specified VLAN.
—Enable DAI.
arp-inspection
When ARP inspection is enabled, the switch logs invalid ARP packets that it receives
on each interface, along with the sender's IP and MAC addresses.
—Disable DAI.
no-arp-inspection
Disabled.
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.
Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC
Move Limiting, on an EX Series Switch on page 2849
Example: Configuring DHCP Snooping, DAI , and MAC Limiting on an EX Series Switch
with Access to a DHCP Server Through a Second Switch on page 2873
Example: Configuring DHCP Snooping and DAI to Protect the Switch from ARP Spoofing
Attacks on page 2866
Enabling Dynamic ARP Inspection (CLI Procedure) on page 2913
Enabling Dynamic ARP Inspection (J-Web Procedure) on page 2914
Copyright © 2010, Juniper Networks, Inc.