16.03.2014 Views

Policy Framework Configuration Guide - Juniper Networks

Policy Framework Configuration Guide - Juniper Networks

Policy Framework Configuration Guide - Juniper Networks

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Chapter 16: Summary of Traffic Sampling, Forwarding, and Monitoring <strong>Configuration</strong> Statements<br />

forwarding-options<br />

Syntax forwarding-options { ... }<br />

Hierarchy Level<br />

[edit]<br />

Release Information Statement introduced before Junos OS Release 7.4.<br />

Description<br />

Configure traffic forwarding.<br />

The statements are explained separately.<br />

Required Privilege<br />

Level<br />

interface—To view this statement in the configuration.<br />

interface-control—To add this statement to the configuration.<br />

group (DHCP Spoofing Prevention)<br />

Syntax group group-name {<br />

interface interface-name;<br />

}<br />

Hierarchy Level<br />

[edit routing-instances routing-instance-name bridge-domains bridge-domain-name<br />

forwarding-options dhcp-relay],<br />

[edit routing-instances routing-instance-name forwarding-options dhcp-relay]<br />

Release Information<br />

Description<br />

Statement introduced in Junos OS Release 9.4 (MX Series routers only).<br />

Configure Dynamic Host <strong>Configuration</strong> Protocol (DHCP) snooping on the router. When<br />

acting as a snooping agent, the MX Series router typically is located between the client<br />

and the DHCP relay agent. It creates filters by “snooping” DHCP messages and binding<br />

DHCP-issued IP addresses with the MAC address of the client. These filters help prevent<br />

DHCP spoofing.<br />

Configure DHCP snooping by including the appropriate interfaces under the group<br />

statement.<br />

Required Privilege<br />

Level<br />

Related<br />

Documentation<br />

interface—To view this statement in the configuration.<br />

interface-control—To add this statement to the configuration.<br />

• Preventing DHCP Spoofing on MX Series Ethernet Services Routers on page 374<br />

Copyright © 2010, <strong>Juniper</strong> <strong>Networks</strong>, Inc.<br />

411

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!