Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 3188

Complete Software Guide for Junos
Requirements
Overview and Topology
3084
®
OS for EX Series Ethernet Switches, Release 10.4
This example describes how to configure a DHCP server interface as untrusted to protect
the switch from a rogue DHCP server:
Requirements on page 3084
Overview and Topology on page 3084
Configuration on page 3086
Verification on page 3086
This example uses the following hardware and software components:
One EX Series switch
Junos OS Release 9.0 or later for EX Series switches
A DHCP server to provide IP addresses to network devices on the switch
Before you configure an untrusted DHCP server interface to mitigate rogue DHCP server
attacks, be sure you have:
Connected the DHCP server to the switch.
Enabled DHCP snooping on the VLAN.
Configured the VLAN employee-vlan
with Multiple VLANs for EX Series Switches" on page 1532.
Ethernet LANs are vulnerable to address spoofing and DoS attacks on network devices.
This example describes how to protect the switch from rogue DHCP server attacks.
This example shows how to explicitly configure an untrusted interface on an EX3200-24P
switch. Figure 77 on page 3085 illustrates the topology for this example.
on the switch. See "Example: Setting Up Bridging
Copyright © 2010, Juniper Networks, Inc.