Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 78

Complete Software Guide for Junos
Part 20
Chapter 99
Chapter 100
Part 21
Chapter 106
Chapter 107
Part 22
Chapter 113
Chapter 114
Part 25
Chapter 132
Chapter 133
lxxviii
®
OS for EX Series Ethernet Switches, Release 10.4
Port Security
Port Security Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3049
Figure 69: DHCP Server Connected Directly to Switch . . . . . . . . . . . . . . . . . . . 3056
Figure 70: DHCP Server Connected Directly to Switch 2, with Switch 2 Connected
to Switch 1 Through a Trusted Trunk Port . . . . . . . . . . . . . . . . . . . . . . . . . . 3056
Figure 71: Switch Is the DHCP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3057
Figure 72: Switch Acting as Relay Agent Through Router to DHCP Server . . . . 3058
Figure 73: DHCP Clients, Switch, and DHCP Server Are All on Same VLAN . . . 3066
Figure 74: Switch Relays DHCP Requests to Server . . . . . . . . . . . . . . . . . . . . . . 3067
Examples: Port Security Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3073
Figure 75: Network Topology for Basic Port Security . . . . . . . . . . . . . . . . . . . . . 3075
Figure 76: Network Topology for Basic Port Security . . . . . . . . . . . . . . . . . . . . . 3081
Figure 77: Network Topology for Basic Port Security . . . . . . . . . . . . . . . . . . . . . 3085
Figure 78: Network Topology for Basic Port Security . . . . . . . . . . . . . . . . . . . . . 3088
Figure 79: Network Topology for Basic Port Security . . . . . . . . . . . . . . . . . . . . . 3091
Figure 80: Network Topology for Basic Port Security . . . . . . . . . . . . . . . . . . . . . 3095
Figure 81: Network Topology for Port Security Setup with Two Switches on the
Same VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3099
Figure 82: Network Topology for Configuring DHCP Option 82 on a Switch That
Is on the Same VLAN as the DHCP Clients and the DHCP Server . . . . . . . . 3123
Routing Policy and Packet Filtering (Firewall Filters)
Firewall Filters-Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3225
Figure 83: Firewall Filter Processing Points in the Packet Forwarding Path . . . . 3231
Figure 84: Application of Firewall Filters to Control Packet Flow . . . . . . . . . . . . 3233
Figure 85: Evaluation of Terms Within a Firewall Filter . . . . . . . . . . . . . . . . . . . . 3254
Examples of Firewall Filters Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . 3261
Figure 86: Application of Port, VLAN, and Layer 3 Routed Firewall Filters . . . . 3263
Figure 87: SSH Connection From a Management PC to an EX Series Switch . . 3285
Class of Service
Class of Service (CoS)-Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3373
Figure 88: Packet Flow Across the Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3375
Examples: CoS Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3401
Figure 89: Topology for Configuring CoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3402
MPLS
MPLS-Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3641
Figure 90: Label Encoding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3651
Figure 91: MPLS Label Swapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3652
Example of MPLS Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3655
Figure 92: Configuring MPLS on EX Series Switches . . . . . . . . . . . . . . . . . . . . . 3656
Copyright © 2010, Juniper Networks, Inc.