secure-access-port
语法
secure-access-port {
dhcp-snooping-file {
location local_pathname | remote_URL;
timeout seconds;
write-interval seconds;
}
dhcpv6-snooping-file {
location local_pathname | remote_URL;
timeout seconds;
write-interval seconds;
}
interface (all | interface-name) {
allowed-mac {
mac-address-list;
}
(dhcp-trusted | no-dhcp-trusted);
fcoe-trusted;
mac-limit limit action (drop | log | none | shutdown);
no-allowed-mac-log;
persistent-learning;
static-ipip-address {
vlan vlan-name;
mac mac-address;
}
static-ipv6ip-address {
vlan vlan-name;
mac mac-address;
}
voip-mac-exclusive;
(dhcp-trusted | no-dhcp-trusted);
}
vlan (all | vlan-name) {
(arp-inspection | no-arp-inspection) [
forwarding-class class-name;
}
dhcp-option82 {
circuit-id {
prefix hostname;
use-interface-description;
use-vlan-id;
}
remote-id {
prefix hostname | mac | none;
use-interface-description;
use-string string;
}
vendor-id <string>;
}
(examine-dhcp | no-examine-dhcp) {
forwarding-class class-name;
}
(examine-dhcpv6 | no-examine-dhcpv6) {
forwarding-class class-name;
}
examine-fip {
fc-map fc-map-value;
}
(ip-source-guard | no-ip-source-guard);
(ipv6-source-guard | no-ipv6-source-guard);
mac-move-limit limit action (drop | log | none | shutdown);
}
(neighbor-discovery-inspection | no-neighbor-discovery-inspection);
no-option37;
}
}
层次结构级别
[edit ethernet-switching-options]
描述
配置端口安全功能，包括 MAC 限制、动态 ARP 检查、接口是否可以接收 DHCP 响应、DHCP 侦听、IP 源保护、DHCP 选项 82、MAC 移动限制和 FIP 侦听。
其余语句将单独解释。请参阅 CLI 资源管理器。
所需权限级别
system - 在配置中查看此语句。系统控制 - 将此语句添加到配置中。
发布信息
Junos OS 9.0 版中引入的语句。
支持 EX 系列交换机的 Junos OS 14.1X53-D10 版中引入的 IPv6。