Switching

Expand all | Collapse all

IP source guard on ELS EX3400

Jump to Best Answer
  • 1.  IP source guard on ELS EX3400

     
    Posted 08-22-2017 11:21

    The below link states that IP Source guard is supported on EX switches with ELS.

     

    https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/port-security-ip-source-guard-cli-els.html

     

    But when I go to configure it, the option is not there. Can anyone explain why this is?

     

    {master:0}[edit vlans VOIP-HOSTS forwarding-options dhcp-security]
    lab@xxx# set ?
    Possible completions:
    + apply-groups Groups from which to inherit configuration data
    + apply-groups-except Don't inherit configuration data from these groups
    arp-inspection Enable dynamic ARP inspection
    > dhcpv6-options DHCPv6 option processing for snooped packets
    > group Define a DHCP security group for overriding defaults
    neighbor-discovery-inspection Enable neighbor discovery inspection
    no-dhcp-snooping Disable dhcp snooping
    no-dhcpv6-snooping Disable DHCPv6 snooping
    > option-82 DHCP option-82 processing for snooped packets



  • 2.  RE: IP source guard on ELS EX3400

    Posted 08-22-2017 11:47

    maybe because of the fact that the ex3400 does not run ELS ( the 4300 does run ELS) so you have to google for the old syntax

     

    regards

    alexander



  • 3.  RE: IP source guard on ELS EX3400

     
    Posted 08-22-2017 12:21


  • 4.  RE: IP source guard on ELS EX3400
    Best Answer

     
    Posted 08-22-2017 13:27

    Yes EX3400 (along with EX2300, EX4300, EX4600, and EX9200) are all ELS based hardware platforms.  EX3400 is missing IP Source Guard.  This feature is supposed to be added into this product in either 17.3 or 17.4 I believe.

     

    This why you can not config IPSG on EX3400 with any current code available. There have been other threads in this forum covering this.