Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 3205

Results
Copyright © 2010, Juniper Networks, Inc.
user@switch1# set vlan employee-vlan examine-dhcp
Enable DAI on the VLAN:
5.
[edit ethernet-switching-options secure-access-port]
user@switch1# set vlan employee-vlan arp-inspection
Configure a MAC limit of
6.
with new addresses are dropped if the limit has been exceeded):
[edit ethernet-switching-options secure-access-port]
user@switch1# set interface ge-0/0/1 mac-limit 5
Display the results of the configuration:
[edit]
user@switch1# show
ethernet-switching-options {
secure-access-port {
interface ge-0/0/1.0{
mac-limit 5 action drop;
}
vlan employee-vlan {
arp-inspection;
examine-dhcp;
}
}
}
interfaces {
ge-0/0/1 {
unit 0 {
family ethernet-switching {
vlan {
members 20;
}
}
}
}
ge-0/0/2 {
unit 0 {
family ethernet-switching {
vlan {
members 20;
}
}
}
}
ge-0/0/3 {
unit 0 {
family ethernet-switching {
vlan {
members 20;
}
}
}
}
Chapter 100: Examples: Port Security Configuration
5 on ge-0/0/1 and use the default action, drop (packets
3101