Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


vlan (Access Port Security)


Hierarchy Level


Apply any of the following security options to a VLAN:

  • DHCP snooping

  • DHCPv6 snooping with DHCP option 37

  • DHCP option 82

  • Dynamic ARP inspection (DAI)

  • IPv6 neighbor discovery inspection

  • FIP snooping

  • IP source guard

  • IPv6 source guard

  • MAC move limiting

The remaining statements are explained separately. See CLI Explorer.


To display a list of all configured VLANs on the system, including VLANs that are configured but not committed, type ? after vlan or vlans in your configuration mode command line. Note that only one VLAN is displayed for a VLAN range.


all—Apply the feature to all VLANs.

vlan-name—Apply the feature to the specified VLAN.

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 9.0.

Support for the examine-dhcpv6, no-option37, neighbor-discovery-inspection, and ipv6-source-guard statements introduced in Junos OS Release 14.1x53-D10 for EX Series switches.