Dynamic ARP Inspection on vMX / vQFX?

Hi all,

Currently i'm try simulate prevent ARP poisoning / spoofing based on below url by add  command dhcp-security stanza. When i add the dhcp-security arp-inspection then the windows PC cannot get the ip address from DHCP server. When i delete the config then the Win7 can get the dhcp. Is it normal behaviour or need to add another config to make sure the Windows PC can get the ip address even the dhcp-security stanza configure in bridge-domain. Appreciate any feedback

https://www.juniper.net/documentation/en_US/junos/topics/topic-map/port-security-trusted-dhcp-server.html

https://www.juniper.net/documentation/en_US/junos/topics/example/port-security-protect-from-spoofing-els.html