- Download PDFs
- vlan
- Related Topics
- Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC Move Limiting, on an EX-series Switch
- Example: Configuring IP Source Guard with Other EX-series Switch Features to Mitigate Address-Spoofing Attacks on Untrusted Access Interfaces
- Example: Setting Up DHCP Option 82 on an EX-series Switch with No Relay Agent Between Clients and DHCP Server
- Enabling Dynamic ARP Inspection (CLI Procedure)
- Enabling DHCP Snooping (CLI Procedure)
- Configuring IP Source Guard (CLI Procedure)
- Configuring MAC Move Limiting (CLI Procedure)
- Setting Up DHCP Option 82 on the Switch with No Relay Agent Between Clients and DHCP Server (CLI Procedure)
vlan
Syntax
- vlan (all | vlan-name) {
- (arp-inspection | no-arp-inspection);
-
- dhcp-option82 {
-
- circuit-id {
- prefix hostname;
- use-interface-description;
- use-vlan-id;
- }
-
- remote-id {
- prefix hostname | mac | none;
- use-interface-description;
- use-string string;
- }
- vendor-id <string>;
- }
- (examine-dhcp |
no-examine-dhcp);
- (ip-source-guard | no-ip-source-guard);
- mac-move-limit limit action action;
- }
Hierarchy Level
Release Information
Statement introduced in JUNOS Release 9.0 for EX-series switches.
Option ip-source-guard introduced in JUNOS Release 9.2 for EX-series switches.
Option dhcp-option82 introduced in JUNOS Release 9.3 for EX-series switches.
Statement updated with enhanced ? (CLI completion feature) functionality in JUNOS Release 9.5 for EX-series switches.
Description
Apply DHCP snooping, dynamic ARP inspection (DAI), IP source guard, DHCP option 82, and MAC move limiting.
The remaining statements are explained separately.
 |
Tip: To display a list of all configured VLANs on the system, including VLANs that are configured but not committed, type ? after vlan or vlans in your configuration mode command line. Note that only one VLAN is displayed for a VLAN range. |
Options
-
all—Apply DHCP snooping, DAI, IP source guard, DHCP option 82, and MAC move limiting to all VLANs.
-
vlan-name —Apply DHCP snooping, DAI, IP source guard, DHCP option 82, and MAC move limiting to the specified VLAN.
Required Privilege Level
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.