Technical Documentation

group (DHCP Spoofing Prevention)

Syntax

group group-name {interface interface-name;}

Hierarchy Level

[edit routing-instances routing-instance-name bridge-domains bridge-domain-name forwarding-options dhcp-relay],[edit routing-instances routing-instance-name forwarding-options dhcp-relay]

Release Information

Statement introduced in JUNOS Release 9.4 (MX Series routers only).

Description

Configure Dynamic Host Configuration Protocol (DHCP) snooping on the router. When acting as a snooping agent, the MX Series router typically is located between the client and the DHCP relay agent. It creates filters by “snooping” DHCP messages and binding DHCP-issued IP addresses with the MAC address of the client. These filters help prevent DHCP spoofing.

Configure DHCP snooping by including the appropriate interfaces under the group statement.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.


Published: 2010-04-15