Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 3197

Verification
Purpose
Action
Meaning
Purpose
Action
Copyright © 2010, Juniper Networks, Inc.
interface ge-0/0/8.0 {
dhcp-trusted;
}
vlan employee-vlan {
arp-inspection;
examine-dhcp;
}
To confirm that the configuration is working properly:
Verifying That DHCP Snooping Is Working Correctly on the Switch on page 3093
Verifying That DAI Is Working Correctly on the Switch on page 3093
Verifying That DHCP Snooping Is Working Correctly on the Switch
Verify that DHCP snooping is working on the switch.
Send some DHCP requests from network devices (here they are DHCP clients) connected
to the switch.
Display the DHCP snooping information when the port on which the DHCP server connects
to the switch is trusted. The following output results when requests are sent from the
MAC addresses and the server has provided the IP addresses and leases:
user@switch> show dhcp snooping binding
DHCP Snooping Information:
MAC Address IP Address
----------------- ----------
00:05:85:3A:82:77 192.0.2.17
00:05:85:3A:82:79 192.0.2.18
00:05:85:3A:82:80 192.0.2.19
00:05:85:3A:82:81 192.0.2.20
00:05:85:3A:82:83 192.0.2.21
00:05:85:27:32:88 192.0.2.22
When the interface on which the DHCP server connects to the switch has been set to
trusted, the output (see preceding sample) shows, for each MAC address, the assigned
IP address and lease time—that is, the time, in seconds, remaining before the lease
expires.
Verifying That DAI Is Working Correctly on the Switch
Verify that DAI is working on the switch.
Send some ARP requests from network devices connected to the switch.
Display the DAI information:
user@switch> show arp inspection statistics
ARP inspection statistics:
Interface Packets received
--------------- ---------------
Chapter 100: Examples: Port Security Configuration
Lease Type VLAN
----- ---- ----
600 dynamic employee-vlan
653 dynamic employee-vlan
720 dynamic employee-vlan
932 dynamic employee-vlan
1230 dynamic employee-vlan
3200 dynamic employee-vlan
ARP inspection pass ARP inspection failed
-------------------- ---------------------
Interface
---------
ge-0/0/1.0
ge-0/0/1.0
ge-0/0/2.0
ge-0/0/2.0
ge-0/0/2.0
ge-0/0/3.0
3093