Policy Framework Configuration Guide - Juniper Networks

Chapter 16: Summary of Traffic Sampling, Forwarding, and Monitoring Configuration Statements
dhcp-relay (DHCP Spoofing Prevention)
Syntax dhcp-relay {
group group-name {
interface interface-name;
}
}
Hierarchy Level
[edit routing-instances routing-instance-name bridge-domains bridge-domain-name
forwarding-options],
[edit routing-instances routing-instance-name forwarding-options]
Release Information
Description
Statement introduced in Junos OS Release 9.4 (MX Series routers only).
Configure Dynamic Host Configuration Protocol (DHCP) snooping on the router. When
acting as a snooping agent, the MX Series router typically is located between the client
and the DHCP relay agent. It creates filters by “snooping” DHCP messages and binding
DHCP-issued IP addresses to the MAC address of the client. These filters help prevent
DHCP spoofing.
Configure DHCP snooping by including the appropriate interfaces in the DHCP relay
configuration.
The statements are explained separately.
Required Privilege
Level
Related
Documentation
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
• Preventing DHCP Spoofing on MX Series Ethernet Services Routers on page 374
disable
Syntax
disable;
Hierarchy Level
[edit forwarding-options packet-capture],
[edit forwarding-options sampling],
[edit forwarding-options sampling family family-name output file]
Release Information Statement introduced before Junos OS Release 7.4.
Supported added at the [edit forwarding-options packet-capture] hierarchy level on J
Series Services Routers in Junos OS Release 7.5.
Description
Disable traffic sampling or (on J Series Services Routers) packet capture.
Required Privilege
Level
Related
Documentation
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
• Configuring Packet Capture on page 379
• Disabling Traffic Sampling on page 349
Copyright © 2010, Juniper Networks, Inc.
391