Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
interface (DHCP Spoofing Prevention)
Syntax
interface interface-name;
Hierarchy Level
[edit routing-instances routing-instance-name bridge-domains bridge-domain-name
forwarding-options dhcp-relay group group-name],
[edit routing-instances routing-instance-name forwarding-options dhcp-relay group
group-name]
Release Information
Description
Statement introduced in Junos OS Release 9.4 (MX Series routers only).
Configure Dynamic Host Configuration Protocol (DHCP) snooping on the router. When
acting as a snooping agent, the MX Series router typically is located between the client
and the DHCP relay agent. It creates filters by “snooping” DHCP messages and binding
DHCP-issued IP addresses with the MAC address of the client. These filters help prevent
DHCP spoofing.
DHCP snooping is configured by including the appropriate interfaces.
Required Privilege
Level
Related
Documentation
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
• Preventing DHCP Spoofing on MX Series Ethernet Services Routers on page 374
interface (DNS and TFTP Packet Forwarding or Relay Agent)
Syntax interface interface-name {
broadcast;
description text-description;
no-listen;
server address ;
}
Hierarchy Level
[edit forwarding-options helpers domain],
[edit forwarding-options helpers tftp]
Release Information Statement introduced before Junos OS Release 7.4.
Statement introduced in Junos OS Release 9.0 for EX Series switches.
Description
Specify the interface for monitoring and forwarding DNS or TFTP requests.
Options
interface-name—Name of the interface.
The remaining statements are explained separately.
Required Privilege
Level
Related
Documentation
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
• Configuring DNS and TFTP Packet Forwarding on page 371
422
Copyright © 2010, Juniper Networks, Inc.