Understanding Ip Source Guard For Port Security On Ex Series Switches - Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual

Related
Documentation

Understanding IP Source Guard for Port Security on EX Series Switches

Copyright © 2010, Juniper Networks, Inc.
for the switch-as-relay-agent; in this instance, the switch relays requests through a router
to the server.
Figure 74: Switch Relays DHCP Requests to Server
For the configuration shown in Figure 74 on page 3067, you set DHCP option 82 at the
forwarding-options helpers bootp]
Port Security for EX Series Switches Overview on page 3049
Example: Setting Up DHCP Option 82 on an EX Series Switch with No Relay Agent
Between Clients and DHCP Server on page 3122
Example: Setting Up DHCP Option 82 with an EX Series Switch as Relay Agent Between
Clients and a DHCP Server on page 3119
Setting Up DHCP Option 82 on the Switch with No Relay Agent Between Clients and
DHCP Server (CLI Procedure) on page 3153
Setting Up DHCP Option 82 with the Switch as a Relay Agent Between Clients and
DHCP Server (CLI Procedure) on page 3150
Ethernet LAN switches are vulnerable to attacks that involve spoofing (forging) of source
IP addresses or source MAC addresses. You can use the IP source guard access port
security feature on Juniper Networks EX Series Ethernet Switches to mitigate the effects
of these attacks.
IP Address Spoofing on page 3068
How IP Source Guard Works on page 3068
Chapter 99: Port Security Overview
hierarchy level.
[edit
3067