Juniper JUNOS OS 10.3 - SOFTWARE Manual page 3058

Complete Software Guide for Junos
interface
Syntax
Hierarchy Level
Release Information
Description
Options
Required Privilege
Level
Related
Documentation
2962
®
OS for EX Series Ethernet Switches, Release 10.3
interface (all | interface-name) {
allowed-mac {
mac-address-list;
}
(dhcp-trusted | no-dhcp-trusted);
mac-limit limit action action;
no-allowed-mac-log;
static-ip ip-address {
vlan vlan-name;
mac mac-address;
}
}
[edit ethernet-switching-options secure-access-port]
Statement introduced in Junos OS Release 9.0 for EX Series switches.
introduced in Junos OS Release 9.2 for EX Series switches.
static-ip
no-allowed-mac-log introduced in Junos OS Release 9.3 for EX Series switches.
Apply port security features to all interfaces or to the specified interface.
The statements are explained separately.
all —Apply port security features to all interfaces.
—Apply port security features to the specified interface.
interface-name
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.
Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC
Move Limiting, on an EX Series Switch on page 2849
Example: Configuring Allowed MAC Addresses to Protect the Switch from DHCP
Snooping Database Alteration Attacks on page 2870
Example: Configuring MAC Limiting, Including Dynamic and Allowed MAC Addresses,
to Protect the Switch from Ethernet Switching Table Overflow Attacks on page 2856
Example: Configuring MAC Limiting to Protect the Switch from DHCP Starvation Attacks
on page 2863
Example: Configuring a DHCP Server Interface as Untrusted to Protect the Switch from
Rogue DHCP Server Attacks on page 2859
Configuring MAC Limiting (CLI Procedure) on page 2915
Enabling a Trusted DHCP Server (CLI Procedure) on page 2912
Configuring Static IP Addresses for DHCP Bindings on Access Ports (CLI Procedure)
on page 2925
Copyright © 2010, Juniper Networks, Inc.