Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 55

Chapter 102
Chapter 103
Chapter 104
Copyright © 2010, Juniper Networks, Inc.
Enabling Dynamic ARP Inspection (CLI Procedure) . . . . . . . . . . . . . . . . . . . . . . 3137
Enabling Dynamic ARP Inspection (J-Web Procedure) . . . . . . . . . . . . . . . . . . . 3138
Configuring MAC Limiting (CLI Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3139
Configuring MAC Limiting (J-Web Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . 3141
Configuring MAC Move Limiting (CLI Procedure) . . . . . . . . . . . . . . . . . . . . . . . . 3143
Configuring MAC Move Limiting (J-Web Procedure) . . . . . . . . . . . . . . . . . . . . . . 3145
Setting the none Action on an Interface to Override a MAC Limit Applied to All
Interfaces (CLI Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3146
Configuring IP Source Guard (CLI Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . 3147
Configuring Static IP Addresses for DHCP Bindings on Access Ports (CLI
Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3149
Setting Up DHCP Option 82 with the Switch as a Relay Agent Between Clients
and DHCP Server (CLI Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3150
Setting Up DHCP Option 82 on the Switch with No Relay Agent Between Clients
and DHCP Server (CLI Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3153
Configuring Proxy ARP (CLI Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3155
Configuring Autorecovery From the Disabled State on Secure or Storm Control
Interfaces (CLI Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3156
Verifying Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3157
Monitoring Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3157
Verifying That DHCP Snooping Is Working Correctly . . . . . . . . . . . . . . . . . . . . . . 3158
Verifying That a Trusted DHCP Server Is Working Correctly . . . . . . . . . . . . . . . . 3159
Verifying That DAI Is Working Correctly . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3160
Verifying That MAC Limiting Is Working Correctly . . . . . . . . . . . . . . . . . . . . . . . . 3161
Verifying That MAC Limiting for Dynamic MAC Addresses Is Working
Correctly . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3161
Verifying That Allowed MAC Addresses Are Working Correctly . . . . . . . . . . 3162
Verifying Results of Various Action Settings When the MAC Limit Is
Exceeded . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3162
Customizing the Ethernet Switching Table Display to View Information for
a Specific Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3164
Verifying That MAC Move Limiting Is Working Correctly . . . . . . . . . . . . . . . . . . . 3165
Verifying That IP Source Guard Is Working Correctly . . . . . . . . . . . . . . . . . . . . . 3166
Verifying That Proxy ARP Is Working Correctly . . . . . . . . . . . . . . . . . . . . . . . . . . 3166
Verifying That the Port Error Disable Setting Is Working Correctly . . . . . . . . . . . 3167
Troubleshooting Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3169
Troubleshooting Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3169
MAC Addresses That Exceed the MAC Limit or MAC Move Limit Are Not
Listed in the Ethernet Switching Table . . . . . . . . . . . . . . . . . . . . . . . . . 3169
Multiple DHCP Server Packets Have Been Received on Untrusted
Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3169
Configuration Statements for Port Security . . . . . . . . . . . . . . . . . . . . . . . . . 3171
[edit ethernet-switching-options] Configuration Statement Hierarchy . . . . . . . 3171
[edit forwarding-options] Configuration Statement Hierarchy . . . . . . . . . . . . . . 3173
allowed-mac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3175
arp-inspection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3176
circuit-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3177
Table of Contents
lv