On 9 February 2017 at 15:11, james list <[email protected]> wrote:
Hey, > My question: is there a way to protect the firewall ip addressing from > other machines in lan which could send gratuitous arp with these addresses ? > > The ip addressing is static, no dhcp assignment on the server. You can use DAI (Dynamic ARP Inspection) and IPSG (IP Source Guard). But instead of DHCP, you create manual IPSG bindings. -- ++ytti _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
