vlan (Secure Access Port)
Syntax
vlan (all | vlan-name) {
examine-fip {
examine-vn2vn {
beacon-period milliseconds;
}
fc-map fc-map-value;
no-fip-snooping-scaling;
}
dhcp-option82
circuit-id {
prefix (Circuit ID for Option 82) hostname;
use-interface-description;
use-vlan-id;
}
remote-id {
prefix (Remote ID for Option 82) hostname | mac | none;
use-interface-description;
use-string string;
}
vendor-id <string>;
}
(arp-inspection | no-arp-inspection);
circuit-id {
prefix (Circuit ID for Option 82) hostname;
use-interface-description;
use-vlan-id;
}
remote-id {
prefix (Remote ID for Option 82) hostname | mac | none;
use-interface-description;
use-string string;
}
vendor-id <string>;
}
(examine-dhcp | no-examine-dhcp);
mac-move-limitlimit action action;
}
Hierarchy Level
[edit ethernet-switching-options secure-access-port]
Description
Apply DHCP snooping, dynamic ARP inspection (DAI), DHCP option 82, and MAC move limiting.
To display a list of all configured VLANs on the system, including VLANs that are configured but not committed, type ? after vlan or vlans in your configuration mode command line. Note that only one VLAN is displayed for a VLAN range.
The remaining statements are explained separately. See CLI Explorer.
Options
all—Apply DHCP snooping, DAI, DHCP option 82, and MAC move limiting to all VLANs.
vlan-name —Apply DHCP snooping, DAI, DHCP option 82, and MAC move limiting to the specified VLAN.
Required Privilege Level
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 11.1.