Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 3005 / 3946

Table 373: Port Security on Interfaces
Your Action Function Field
Select to enable DHCP trust. Specifies trusting DHCP packets on the
selected interface. By default, trunk ports are
dhcp-trusted .
Trust DHCP
Enter a number. Specifies the number of MAC addresses that
can be learned on a single Layer 2 access port.
This option is not valid for trunk ports. MAC Limit
Select one:
• Log—Generate a system log entry, an SNMP trap, or an
alarm.
• Drop—Drop the packets and generate a system log entry,
an SNMP trap, or an alarm. (Default)
• Shutdown—Shut down the interface and generate an
alarm. You can mitigate the effect of this option by
configuring autorecovery from the disabled state and
specifying a
disable timeout
value. See “Configuring
Autorecovery From the Disabled State on Secure or
Storm Control Interfaces (CLI Procedure)” on page 2796
•
None—No action to be taken.
Specifies the action to be taken if the MAC
limit is exceeded. This option is not valid for
trunk ports. MAC Limit
Action
To add a MAC address:
1. Click
Add
.
2. Enter the MAC address.
3. Click OK .
Specifies the MAC addresses that are allowed
for the interface. Allowed MAC
List
Related
Documentation
Configuring Port Security (CLI Procedure) on page 2906
•
•
Example: Configuring Port Security, with DHCP Snooping, DAI, MAC Limiting, and MAC
Move Limiting, on an EX Series Switch on page 2849
•
Monitoring Port Security on page 2933
•
Port Security for EX Series Switches Overview on page 2825
2909 Copyright © 2010, Juniper Networks, Inc.
Chapter 95: Configuring Port Security