Ip-Source-Guard - Juniper JUNOS OS 10.3 - SOFTWARE Manual

ip-source-guard

Syntax
Hierarchy Level
Release Information
Description
Default
Required Privilege
Level
Related
Documentation
mac
Syntax
Hierarchy Level
Release Information
Description
Options
Required Privilege
Level
Related
Documentation
Copyright © 2010, Juniper Networks, Inc.
(ip-source-guard | no-ip-source-guard);
[edit ethernet-switching-options secure-access-port vlan (all | vlan-name)]
Statement introduced in Junos OS Release 9.2 for EX Series switches.
Perform IP source guard checking on packets sent from access interfaces. Validate source
IP addresses and source MAC addresses on all VLANs or on the specified VLAN or VLAN
range. Forward packets with valid addresses and drop those with invalid addresses.
ip-source-guard —Enable IP source guard checking.
—Disable IP source guard checking.
no-ip-source-guard
Disabled.
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.
Example: Configuring IP Source Guard on a Data VLAN That Shares an Interface with
a Voice VLAN on page 2888
Example: Configuring IP Source Guard with Other EX Series Switch Features to Mitigate
Address-Spoofing Attacks on Untrusted Access Interfaces on page 2880
Configuring IP Source Guard (CLI Procedure) on page 2923
mac mac-address;
[edit ethernet-switching-options secure-access-port interface (all | interface-name) static-ip
ip-address vlan vlan-name]
Statement introduced in Junos OS Release 9.2 for EX Series switches.
Media access control (MAC) address, or hardware address, for the device connected to
the specified interface.
mac-address —Value (in hexadecimal format) for address assigned to this device.
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.
Configuring Static IP Addresses for DHCP Bindings on Access Ports (CLI Procedure)
on page 2925
Chapter 98: Configuration Statements for Port Security
2963