Quantcast
Channel: All Ethernet Switching posts
Viewing all articles
Browse latest Browse all 10307

Re: Blocking rogue DHCP servers

$
0
0

hi Steve (or anyone else who knows the answer...), 

 

Is it possible to override a no-dhcp-trusted on all interfaces to permit DHCP server on a specific port?

 

eg, if my DHCP server connects via port ge-0/0/8 on my switch, is it possible to configure:

 

set ethernet-switching-options secure-access-port interface all no-dhcp-trusted
set ethernet-switching-options secure-access-port interface ge-0/0/8 dhcp-trusted

 

to permit DHCP server on ge-0/0/8 but block any other DHCP server spoofing?

 

Secondly, is there any way to query the security ethernet-switching-options of an interface? I haven't found a way to show this information (ie, is DHCP-trusted, is there a mac-limit or specific MAC permissions)?

 

Thanks!

 

Tom

 


Viewing all articles
Browse latest Browse all 10307

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>