Quantcast
Channel: All Ethernet Switching posts
Viewing all articles
Browse latest Browse all 10307

Re: dhcp snooping in MX

$
0
0

I tested this, quite sometime back, may be 14.x release. Here are the result, unfortunately don't have a setup for quick test now..

 

{master}[edit]
root@MX104-1# show bridge-domains bd1100
vlan-id 1100;
interface ge-1/1/2.1100;
routing-interface irb.1100;
forwarding-options {
dhcp-security {
arp-inspection;
ip-source-guard;
}
}

{master}[edit]
root@MX104-1# show interfaces ge-1/1/2.1100
encapsulation vlan-bridge;
vlan-id 1100;

{master}[edit]
root@MX104-1# show interfaces irb.1100
family inet {
address 192.0.1.254/24;
}
mac fa:ae:aa:cd:fb:ab;

{master}[edit]
root@MX104-1# show forwarding-options dhcp-relay
server-group {
AMIT_DHCP {
135.1.0.2;
}
}
group AMIT_DHCP {
active-server-group AMIT_DHCP;
interface irb.1100;
}

{master}[edit]
root@MX104-1#

{master}[edit]
root@MX104-1# run show dhcp relay binding detail

Client IP Address: 192.0.1.11
Hardware Address: 00:10:65:31:01:02
State: BOUND(RELAY_STATE_BOUND)
Lease Expires: 2018-03-15 15:32:36 UTC
Lease Expires in: 3446 seconds
Lease Start: 2018-03-15 14:32:36 UTC
Last Packet Received: 2018-03-15 14:32:36 UTC
Incoming Client Interface: irb.1100:ge-1/1/2.1100
Server Ip Address: 135.1.0.2
Server Interface: none
Bootp Relay Address: 192.0.1.254
Session Id: 21
Client IP Address: 192.0.1.10
Hardware Address: 00:10:65:31:01:03
State: BOUND(RELAY_STATE_BOUND)
Lease Expires: 2018-03-15 15:32:36 UTC
Lease Expires in: 3446 seconds
Lease Start: 2018-03-15 14:32:36 UTC
Last Packet Received: 2018-03-15 14:32:36 UTC
Incoming Client Interface: irb.1100:ge-1/1/2.1100
Server Ip Address: 135.1.0.2
Server Interface: none
Bootp Relay Address: 192.0.1.254
Session Id: 20
Client IP Address: 192.0.1.12
Hardware Address: 00:11:64:31:01:02
State: BOUND(RELAY_STATE_BOUND)
Lease Expires: 2018-03-15 15:30:08 UTC
Lease Expires in: 3298 seconds
Lease Start: 2018-03-15 14:30:08 UTC
Last Packet Received: 2018-03-15 14:30:08 UTC
Incoming Client Interface: irb.1100:ge-1/1/2.1100
Server Ip Address: 135.1.0.2
Server Interface: none
Bootp Relay Address: 192.0.1.254
Session Id: 19

{master}[edit]
root@MX104-1# run show dhcp-security binding ip-source-guard
IP address MAC address Vlan Expires State Interface
192.0.1.10 00:10:65:31:01:03 bd1100 3437 BOUND ge-1/1/2.1100
192.0.1.11 00:10:65:31:01:02 bd1100 3437 BOUND ge-1/1/2.1100
192.0.1.12 00:11:64:31:01:02 bd1100 3290 BOUND ge-1/1/2.1100
192.0.1.13 00:10:65:31:01:02 bd1100 2856 BOUND ge-1/1/2.1100

{master}[edit]
root@MX104-1#


Viewing all articles
Browse latest Browse all 10307

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>