Enabling Dhcp Snooping (J-Web Procedure) - Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual

Enabling DHCP Snooping (J-Web Procedure)

Related
Documentation
Copyright © 2010, Juniper Networks, Inc.
DHCP snooping allows the EX Series switch to monitor and control DHCP messages
received from untrusted devices connected to the switch. It builds and maintains a
database of valid IP-address/MAC-address (IP-MAC) bindings called the DHCP snooping
database.
You configure DHCP snooping for each VLAN, not for each interface (port). By default,
DHCP snooping is disabled for all VLANs.
To enable DHCP snooping on one or more VLANs by using the J-Web interface:
Select
Configure>Security>Port Security
1.
Select one or more VLANs from the VLAN list.
2.
Click the button. If a message appears asking if you want to enable port security,
3. Edit
click .
Yes
Select the Enable DHCP Snooping on VLAN
4.
Click after the command has been successfully delivered.
5. OK
NOTE: You can enable or disable port security on the switch at any time by
clicking the
Activate
page. If security status is shown as
any VLANs or interfaces (ports), the message asking if you want to enable
port security appears.
Enabling DHCP Snooping (CLI Procedure) on page 3134
Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC
Move Limiting, on an EX Series Switch on page 3073
Example: Configuring DHCP Snooping, DAI , and MAC Limiting on an EX Series Switch
with Access to a DHCP Server Through a Second Switch on page 3097
Example: Configuring DHCP Snooping and DAI to Protect the Switch from ARP Spoofing
Attacks on page 3090
Verifying That DHCP Snooping Is Working Correctly on page 3158
Monitoring Port Security on page 3157
Understanding DHCP Snooping for Port Security on EX Series Switches on page 3053
Chapter 101: Configuring Port Security
.
check box and then click
or button on the Port Security Configuration
Deactivate
when you try to edit settings for
Disabled
OK .
3135