設定ARP

#設定ARP要啟用IP source guard,並把設定都加在secure-access-port裡
#[edit]
edit ethernet-switching-options

#把uplink port 設成dhcp trusted
#[edit ethernet-switching-options]
set secure-access-port interfaces ge-0/0/23 dhcp-trusted

#啟動dhcp snooping
#[edit ethernet-switching-options]
set secure-access-port vlan <vlan-id> examine-dhcp

#啟動ip source guard
#[edit ethernet-switching-options]
set secure-access-port vlan <vlan-id> ip-source-guard

#在interface上設定arp
#[edit ethernet-switching-options]
set secure-access-port interfaces ge-0/0/1 static-ip 192.168.224.33 mac 0000.0000.0000
Categories: Juniper