Which configuration provides dynamic ARP inspection on access port ge-0/0/0?
A.
secure-access-port {
interface ge-0/0/0.0 {
dhcp-trusted;
}
vlan vlan10 {
arp-inspection;
examine-dhcp;
}
}
B.
secure-access-port {
interface ge-0/0/0.0 {
dhcp-trusted;
}
vlan vlan10 {
dynamic-arp-inspection;
}
}
C.
secure-access-port {
interface ge-0/0/0.0 {
no-dhcp-trusted;
}
vlan vlan10 {
dynamic-arp-inspection;
examine-dhcp;
}
}
D.
secure-access-port {
interface ge-0/0/0.0 {
static-ip 255.255.255.255
}
vlan vlan10 {
arp-inspection;
}
}
Explanation:
The dhcp-trusted command marks the interface as trusted an bypasses the ARP inspection. Therfore the correct answer is C.
1
0
This question is for a legacy JunOS software
the right implemention for ELS software would be the followed single command:
set vlans v10 forwarding-options dhcp-security arp-inspection group MYGROUP interface ge-0/0/0
0
0