EX2200 DHCP - Snooping and IP-Guard

From WTFwiki
Revision as of 08:59, 6 November 2024 by Anexit (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Setting up dhcdp snooping to prevent a router or another device from broadcasting on a network switch;

 set ethernet-switching-options secure-access-port interface ge-0/0/24.0 dhcp-trusted

#Use this for static ips that are trusted;
----------
 set ethernet-switching-options secure-access-port interface ge-0/0/14 static-ip 10.1.1.1 mac 00:11:11:11:11:11 vlan data
----------

 set ethernet-switching-options secure-access-port vlan data examine-dhcp
 set ethernet-switching-options secure-access-port vlan data ip-source-guard

show dhcp snooping binding show ip-source-guard

Verify the devices are in the table, * means not available.