Navigation
Supported Platforms
Related Documentation
- EX Series
- Enabling a Trusted DHCP Server (J-Web Procedure)
- EX, QFX Series
- Example: Configuring Basic Port Security Features
- Example: Configuring a DHCP Server Interface as Untrusted to Protect the Switch from Rogue DHCP Server Attacks
- Verifying That a Trusted DHCP Server Is Working Correctly
- Monitoring Port Security
- QFX Series
- Understanding Trusted and Untrusted Ports
Enabling a Trusted Port for DHCP
By default, all access ports are untrusted and all trunk ports are trusted with regard to DHCP. Trusted ports allow DHCP servers to provide IP addresses and other information to requesting devices. Untrusted ports drop traffic from DHCP servers to prevent unauthorized servers from providing any configuration information to clients.
If you attach a DHCP server to an access port, you must configure it as trusted. You configure a trusted DHCP server on an interface, not on a VLAN.
 | Note: Before you attach a DHCP server to a trusted access port, ensure that the server is physically secure—that is, that access to the server is monitored and controlled. |
- To configure a trusted interface for a DHCP server by
using the CLI (here, the interface is xe-0/0/8):
[edit ethernet-switching-options secure-access port]
user@switch# set interface xe-0/0/8 dhcp-trusted
Related Documentation
- EX Series
- Enabling a Trusted DHCP Server (J-Web Procedure)
- EX, QFX Series
- Example: Configuring Basic Port Security Features
- Example: Configuring a DHCP Server Interface as Untrusted to Protect the Switch from Rogue DHCP Server Attacks
- Verifying That a Trusted DHCP Server Is Working Correctly
- Monitoring Port Security
- QFX Series
- Understanding Trusted and Untrusted Ports
Published: 2013-01-17
Supported Platforms
Related Documentation
- EX Series
- Enabling a Trusted DHCP Server (J-Web Procedure)
- EX, QFX Series
- Example: Configuring Basic Port Security Features
- Example: Configuring a DHCP Server Interface as Untrusted to Protect the Switch from Rogue DHCP Server Attacks
- Verifying That a Trusted DHCP Server Is Working Correctly
- Monitoring Port Security
- QFX Series
- Understanding Trusted and Untrusted Ports
