Supported Platforms
Related Documentation
- EX Series, QFabric System, QFX Series standalone switches
- Understanding DHCP Snooping for Port Security
Making IP-MAC Bindings in the DHCP Snooping Database Persistent (CLI Procedure)
By default, IP-MAC bindings in the DHCP snooping database do not persist. You can configure the IP-MAC bindings in the DHCP database to persist through switch reboots by configuring a storage location for the DHCP database file. When specifying the location for the DHCP database, you must also specify how frequently the switch writes the database entries into the DHCP snooping database file.
The DHCP snooping database of IP-MAC bindings is created when you enable DHCP snooping. DHCP snooping is not enabled by default. You can configure DHCP snooping on a specific VLAN or on all VLANs. See Enabling DHCP Snooping (CLI Procedure).
To make the IP-MAC bindings in the DHCP snooping database persist through switch reboots:
- For local storage, specify a local pathname as the location
in which to store the DHCP snooping database:
[edit ethernet-switching-options]
user@switch# set secure-access-port dhcp-snooping-file location local-pathname write-interval secondsFor example:
[edit ethernet-switching-options]
user@switch# set secure-access-port dhcp-snooping-file location /var/tmp/test.log write-interval 60 - For remote storage, use ftp://ip-address or ftp://hostname/path as the location in which to store the DHCP snooping database:
[edit ethernet-switching-options]
user@switch# set secure-access-port dhcp-snooping-file location remote_url write-interval secondsFor example:
[edit ethernet-switching-options]
user@switch# set secure-access-port dhcp-snooping-file location ftp://test:Test123@14.1.2.1 write-interval 60
Note: If you save the DHCP or DHCPv6 snooping file to a remote server using TFTP, then the CLI returns a message that the save process is initiated. The CLI remains accessible during the save process; however, if you attempt to save a file while the previous save is still pending, the CLI returns an error message.
Note: Specify any requisite user credentials for the FTP server before you specify the IP address or hostname. In this example, test is the username and Test123 is the password for FTP server 14.1.2.1.
When you are storing the DHCP snooping database at a remote location, you might also want to specify a timeout value for remote read and write operations. See timeout. This configuration is optional.
Related Documentation
- EX Series, QFabric System, QFX Series standalone switches
- Understanding DHCP Snooping for Port Security
Modified: 2016-11-29
Supported Platforms
Related Documentation
- EX Series, QFabric System, QFX Series standalone switches
- Understanding DHCP Snooping for Port Security
