Switching

The below link states that IP Source guard is supported on EX switches with ELS.

https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/port-security-ip-source-guard-cli-els.html

But when I go to configure it, the option is not there. Can anyone explain why this is?

{master:0}[edit vlans VOIP-HOSTS forwarding-options dhcp-security]
lab@xxx# set ?
Possible completions:
+ apply-groups Groups from which to inherit configuration data
+ apply-groups-except Don't inherit configuration data from these groups
arp-inspection Enable dynamic ARP inspection
> dhcpv6-options DHCPv6 option processing for snooped packets
> group Define a DHCP security group for overriding defaults
neighbor-discovery-inspection Enable neighbor discovery inspection
no-dhcp-snooping Disable dhcp snooping
no-dhcpv6-snooping Disable DHCPv6 snooping
> option-82 DHCP option-82 processing for snooped packets

maybe because of the fact that the ex3400 does not run ELS ( the 4300 does run ELS) so you have to google for the old syntax

regards

alexander

Feature Explorer indicates the 3400 is an ELS switch.

https://pathfinder.juniper.net/feature-explorer/feature-info.html?fKey=5890&fn=Uniform+Enhanced+Layer+2+Software+(ELS)+CLI+configuration+statements+and+operational+commands

Yes EX3400 (along with EX2300, EX4300, EX4600, and EX9200) are all ELS based hardware platforms.  EX3400 is missing IP Source Guard.  This feature is supposed to be added into this product in either 17.3 or 17.4 I believe.

This why you can not config IPSG on EX3400 with any current code available. There have been other threads in this forum covering this.