Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 2983 / 3946

[edit ethernet-switching-options]
secure-access-port {
interface ge-0/0/0.0 {
static-ip 11.1.1.1 vlan employee mac 00:11:11:11:11:11;
}
interface ge-0/0/1.0 {
static-ip 11.1.1.2 vlan employee mac 00:22:22:22:22:22;
}
interface ge-0/0/24.0 {
dhcp-trusted;
}
vlan employee {
examine-dhcp;
ip-source-guard;
}
}
Verification
To confirm that the configuration is working properly, perform these tasks:
•
Verifying That 802.1X User Authentication Is Working on the Interface on page 2887
•
Verifying the VLAN Association with the Interface on page 2887
• Verifying That DHCP Snooping and IP Source Guard Are Working on the
VLAN on page 2887
Verifying That 802.1X User Authentication Is Working on the Interface
Purpose Verify that the 802.1X configuration is working on the interface.
Action Use the show dot1x interface command to view the 802.1X details.
Meaning The
Supplicant mode
output field displays the configured administrative mode for each
interface.
Verifying the VLAN Association with the Interface
Purpose Verity interface states and VLAN memberships.
Action Use the show ethernet-switching interfaces command to view the Ethernet switching
table entries.
Meaning The field VLAN members shows the associations between VLANs and interfaces. The
State field shows whether the interfaces are up or down.
For the guest VLAN configuration, the interface is associated with the guest VLAN if and
when the supplicant fails 802.1X user authentication.
Verifying That DHCP Snooping and IP Source Guard Are Working on the VLAN
Purpose Verify that DHCP snooping and IP source guard are enabled and working on the VLAN.
2887 Copyright © 2010, Juniper Networks, Inc.
Chapter 94: Examples: Port Security Configuration