[Contents] [Prev] [Next] [Index] [Report an Error] [No Frames]


Configuring DHCP Local Server

You can use DHCP to configure the router to allow remote access to non-PPP clients. DHCP-based access is also an alternative to PPP in environments such as Public Wireless LANs (PWLANs). In PWLANS, a user scans for available broadband networks, then is redirected to a web-based authentication mechanism to request service.

DHCP provides address assignment information for users. Authentication, authorization, and accounting are separate processes, and are up to the Internet service provider (ISP) to define.

The DHCP local server can configure a client with the following DHCP options:

DHCP Local Server Modes

The router offers an embedded DHCP server, known as the DHCP local server. The DHCP local server has two modes: equal-access and standalone.

NOTE: The E-series router also supports an embedded DHCP version 6 (DHCPv6) local server. The DHCPv6 local server provides a subset of the features of the DHCP local server. For information about configuring the DHCPv6 local server, see DHCPv6 Local Server.


DHCPv6 Local Server

In addition to the embedded DHCP local server that is used for IP version 4 (IPv4) address support, the E-series router includes an embedded DHCPv6 local server. This server enables the router to function as a server for the DHCP protocol for IP version 6 (IPv6). The DHCPv6 local server sends and receives packets via IPv6 and informs IPv6 of the routing requirements of the router clients.

The DHCPv6 local server provides the following IPv6 address support:

Equal-Access Mode

In equal-access mode, the main purpose of the router is to enable access to non-PPP users. The DHCP local server performs the following functions in equal-access mode:

Non-PPP equal access requires the use of:

Local Pool Selection and Address Allocation

The DHCP local server selects a DHCP pool from which to allocate an address using the framed IP address or pool name parameters. The router checks the parameters against the local DHCP pools in the order presented in Table 38. Once the router finds a match, it selects a pool based on the match and does not check other parameters.




Table 38: Local Pool Selection in Equal-Access Mode  
Field
How the DHCP Local Server Uses the Field

Framed IP address

The client's RADIUS entry can be configured with a framed IP address, which the DHCP local server can get from the SDX software.

If the router selects a pool using a framed IP address, the DHCP local server attempts to allocate the framed IP address from the pool. If the framed IP address is not available, then the server allocates the next available address in the pool to the client.

Pool name

Each DHCP local pool has a pool name. The client's RADIUS entry can also be configured with a pool name, which the DHCP local server can get from the SDX software. The SDX software must be configured to send RADIUS attributes to DHCP.

Domain name

You can use a domain name as the name of a DHCP local pool. If the client logs onto the SDX application and RADIUS authenticates the client using a domain name, the DHCP local server receives the domain name from the SDX software.

If the client's domain name does not match the name of the DHCP local pool, the router attempts to match the client's domain name to the domain name field within the pool.

Giaddr

A DHCP local pool is configured with a network address. A gateway IP address (giaddr), which indicates a client's subnetwork, can be presented to the DHCP local server in the client's DHCP request message. The giaddr field in the DHCP request message usually contains the IP address of a DHCP relay server. The router attempts to match the giaddr address in the DHCP request message with the network address of a DHCP local pool.

Cable Modem DHCP Relay

The DHCP local server does not support DCHP requests from cable modems. However, you can set up the DHCP local server to relay DHCP packets that originate from a cable modem to an external DHCP server that can provide the cable modem with the configuration it requests.

The DHCP local server determines whether a DHCP packet is from a cable modem by looking at the Vendor Class ID option. If the Vendor Class ID option value is "docsis1.0" or "docsis1.1," then the packet is from a cable modem.

Once the DHCP local server determines that a DHCP packet is from a cable modem, it checks to see whether a cable modem DHCP server is configured. You can configure up to four cable modem DHCP servers. If one or more cable modem DHCP servers are configured, then the DHCP local server relays DHCP packets to each cable modem DHCP server. If no cable modem DHCP servers are configured, then the DHCP local server drops DHCP packets from cable modems.

If the router receives a DHCP packet from a cable modem and a cable modem DHCP server is configured, the DHCP local server determines whether it has to keep track of the relay by checking the giaddr as follows:

The Connection Process

The following sequence describes how the subscriber connects to the network for the first time using equal-access mode. Figure 10 illustrates the process.

  1. The subscriber's computer boots and issues a DHCP request.
  2. If the SDX software is configured, DHCP queries it for information that DHCP uses to select the address pool and IP address and to configure the client.
  3. After standard DHCP negotiations, the DHCP local server supplies an enduring IP address to the subscriber's computer from a local address pool, as described in the previous section.

The router maintains a host route that maps the enduring IP address to the router's interface associated with the subscriber's computer.

  1. The subscriber's computer retains the enduring IP address until the subscriber turns off the computer.

    NOTE: If a DHCP client attempts to renew its address and the DHCP server receives the request on a different interface than the interface that the client originally used, the DHCP server sends a NAK message to the client, forcing the client to begin the DHCP connection process again.



Figure 10: Non-PPP Equal Access via the Router

Standalone Mode

In standalone mode, the DHCP local server operates as a basic DHCP server; clients are not authenticated. The DHCP local server receives DHCP client requests for addresses, selects DHCP local pools from which to allocate addresses, distributes public addresses to the clients, and maintains the resulting DHCP bindings in a server management table.

Local Pool Selection and Address Allocation

In standalone mode, the DHCP local server selects a pool to allocate a public address for a client; the SDX application is never notified or queried.

The DHCP local server selects a pool by matching the local pool's network address to the giaddr or the received interface IP address. The router first attempts to match the giaddr to a local pool network address. If it does not find a match, the router attempts to match the received interface IP address to a local pool network address.

Once the router selects a DHCP local pool, the DHCP local server first tries to find a reserved IP address for the client in the selected pool. If no reserved address is available, the router attempts to allocate a client's requested IP address. If the requested IP address is not available, the router allocates the next available address in the pool.

Server Management Table

For each client that makes requests of the DHCP local server, the router keeps an entry in the server management table. The entry defines client-specific information and state information. The router uses this table to identify clients when it receives subsequent messages and to maintain the state of each client within the DHCP protocol. In addition, the table contains information that may be transferred to and from the SDX software.

Linking Local Address Pools

In both equal-access mode and standalone mode, you can link a DHCP local pool to another local pool. The linked pool serves as a backup pool. If there are no addresses available in a pool, the DHCP local server attempts to allocate an address from the linked pool.

DHCP Local Server Event Logs

To troubleshoot and monitor your DHCP local server, use the following system event logs:

See JUNOSe System Basics Configuration Guide, Chapter 13, Logging System Events for additional information about the DHCP local server logs.

DHCP Local Server SNMP Traps

The DHCP local server supports a configurable global SNMP trap that generates severity level 1 (alert), 2 (critical), and 3 (error) events. This trap helps administrators monitor DHCP local server general health, error statistics, address lease status, and protocol events.

You use the following command to enable SNMP traps for DHCP local server.

host1(config)#ip dhcp-local snmpTraps 

NOTE: You must configure your SNMP management client to read the MIB objects, and your SNMP trap collector must be capable of decoding the new traps. For information about setting up SNMP, see JUNOSe System Basics Configuration Guide, Chapter 3, Configuring SNMP.

The DHCP local server also supports SNMP traps for local address pool utilization. You use the warning command to define the maximum and minimum threshold values and the snmpTrap command to generate traps when utilization occurs above or below the defined values. For example:

host1(config-dhcp-local)#warning 50 40 
host1(config-dhcp-local)#snmpTrap 

Before You Configure DHCP Local Server

Before you configure DHCP local server, you need to configure interfaces. You can configure ATM or Ethernet interfaces for DHCP local server. These interfaces can be numbered or unnumbered. Because subscribers connect to the router from different subnetworks, you must configure an IP address for each subnetwork on the interface. This action provides connectivity between the subnetwork and the router.

To configure a numbered IP address for DHCP local server:

  1. Select an ATM or Ethernet interface.
  2. Assign the primary IP address for one subnetwork to this interface.
  3. Assign secondary IP addresses for all other subnetworks to this interface.

To configure an unnumbered IP address for DHCP local server:

  1. Specify a loopback interface.
  2. Assign the primary IP address for one subnet to the loopback interface.
  3. Assign secondary IP addresses for all other subnets to the loopback interface.
  4. Select an ATM or Ethernet interface.
  5. Configure an unnumbered IP address associated with the loopback interface on the ATM or Ethernet interface.

For information about defining IP addresses, see JUNOSe Routing Protocols Configuration Guide, Vol. 1, Chapter 5, Configuring IP.

Configuration Tasks

This section covers the configuration tasks for equal-access and standalone modes. Perform the appropriate procedure:

  1. For both equal-access and standalone modes, configure the DHCP local server.
  2. For non-PPP equal access, configure the router to relay DHCP requests from cable modems.
  3. For non-PPP equal access, configure the router to work with the SDX application.

Configuring the DHCP Local Server

To configure the DHCP local server:

  1. Enable the DHCP local server for either equal-access or standalone mode.
  2. host1(config)#service dhcp-local equal-access
    
    host1(config)#service dhcp-local standalone
    
    
    
  3. Specify the maximum number of IP addresses that the DHCP local server can supply to each VPI, VCI, VLAN, or Ethernet subnetwork.
  4. host1(config)#ip dhcp-local limit ethernet 6
    
    
    
  5. Specify any addresses that the DHCP local server must not assign.
  6. host1(config)#ip dhcp-local excluded-address 10.10.3.4
    
    
    
  7. (Optional) Enable DHCP local server traps.
  8. host1(config)#ip dhcp-local snmpTraps
    
    
    
  9. For both equal-access and standalone modes, configure the DHCP local server to supply enduring IP addresses to subscribers who want to access a domain.
  1. Access DHCP Local Pool Configuration mode for the local address pool.
  2. host1(config)#ip dhcp-local pool ispBoston 
    
    host1(config-dhcp-local)#
    
    
    
  3. Specify the enduring IP addresses that the DHCP local server can assign from the local address pool.
  4. host1(config-dhcp-local)#network 10.10.0.0 255.255.0.0
    
    
    
  5. (Optional) Specify a DNS server.
  6. host1(config-dhcp-local)#dns-server 10.10.1.1
    
    
    
  7. (Optional) Specify a Net-Bios server.
  8. host1(config-dhcp-local)#netbios-name-server 10.10.1.1   10.10.1.2
    
    
    
  9. (Optional) Define threshold values for local address pool utilization.
  10. host1(config-dhcp-local)#warning 50 40
    
    
    
  11. (Optional) Enable SNMP traps for local address pool utilization.
  12. host1(config-dhcp-local)#snmpTrap
    
    
    
  13. Specify the router that will forward traffic from these IP addresses to destinations on other subnets.

    NOTE: The default router must be on the same subnetwork as the local server pool IP addresses.


  14. host1(config-dhcp-local)#default-router 10.10.1.3
    
    
    
  15. Specify the lease time for IP addresses.
  16. host1(config-dhcp-local)#lease 0 0 24
    
    
    
  17. (Optional) Specify the type of Net-Bios server.
  18. host1(config-dhcp-local)#netbios-node-type b-node
    
    
    
  19. (Optional) Specify a domain name that can be returned to the subscriber if requested.
  20. host1(config-dhcp-local)#domain-name ispBoston
    
    
    
  21. (Optional) For DHCP standalone mode, reserve an IP address for a specific MAC address.
  22. host1(config-dhcp-local)#reserve 10.10.13.8   0090.1a10.0552
    
    
    
  23. For DHCP standalone mode, set the DHCP server address that is sent to DHCP clients.
  24. host1(config-dhcp-local)#server-address 10.10.20.8
    
    
    
  1. (Optional) For both equal-access and standalone modes, link the local address pool to a backup address pool.
  1. Access DHCP Local Pool Configuration mode for the local address pool.
  2. host1(config)#ip dhcp-local pool ispBoston 
    
    host1(config-dhcp-local)#
    
    
    
  3. Link the current local address pool to another local address pool.
  4. host1(config-dhcp-local)#link ispChicago 
    

default-router

dns-server

domain-name

ip dhcp-local excluded-address

ip dhcp-local limit

ip dhcp-local pool

ip dhcp-local snmpTraps

lease

link

netbios-name-server

netbios-node-type

network

reserve

server-address

service dhcp-local

snmpTrap

warning

Clearing an IP DHCP Local Server Binding

You can use the clear ip dhcp-local binding command to force the removal of a connected user's IP address lease and associated route configuration. Using this command allows you to:

clear ip dhcp-local binding

Configuring the DHCPv6 Local Server

To configure the DHCPv6 local server, you enable the service on the E-series router. The router can then delegate IPv6 prefixes to client routers and provide DNS server information to directly connected router clients.

service dhcpv6-local

ipv6 dhcpv6-local delegated-prefix

ipv6 dhcpv6-local dns-domain-search

ipv6 dhcpv6-local dns-server

ipv6 dhcpv6-local prefix-lifetime

Configuring Cable Modem DHCP Relay

For non-PPP equal-access mode, you can set up the router to relay DHCP messages it receives from cable modems to an external DHCP server that can handle cable modem messages. To do so, use the ip dhcp-local cable-modem command.

ip dhcp-local cable-modem

Configuring the Router to Work with the SDX Application

The E-series router has an embedded SDX client that interacts with the SDX application. For information about configuring the SDX client, see Configuring the SDX Client in Chapter 1, Configuring Remote Access.

Configuration Example

Figure 11 shows the scenario for this example. Subscribers obtain access to ISP Boston via a router. Subscribers log in through the SDX application, and a RADIUS server provides authentication.


Figure 11: Non-PPP Equal-Access Configuration Example

The following steps show how to configure this scenario.

  1. Configure interfaces on the router.
  2. host1(config)#interface loopback 0
    
    host1(config-if)#ip address 10.10.1.1 255.255.255.0
    
    host1(config-if)#ip address 10.10.2.1 255.255.255.0 secondary
    
    host1(config-if)#exit
    
    host1(config)#interface fastEthernet 2/0
    
    host1(config-if)#ip unnumbered loopback 0
    
    
    
  3. Configure the parameters to enable the router to forward authentication requests to the RADIUS server.
  4. host1(config)#radius authentication server 10.10.1.2
    
    host1(config)#udp-port 1645
    
    host1(config)#key radius
    
    
    
  5. Specify the authentication method.
  6. host1(config)#aaa authentication ppp default radius
    
    
    

Or

host1(config)#aaa authentication ppp default none

  1. Enable the DHCP local server.
  2. host1(config)#service dhcp-local
    
    
    
  3. Specify the IP addresses that are in use, so that the DHCP local server cannot assign these addresses.
  4. host1(config)#ip dhcp-local excluded-address 10.10.1.1
    
    host1(config)#ip dhcp-local excluded-address 10.10.1.2
    
    
    
  5. Configure the DHCP local server to provide enduring IP addresses to subscribers of ISP Boston.
  6. host1(config)ip dhcp-local pool ispBoston
    
    host1(config-dhcp-local)#network 10.10.2.0 255.255.255.0
    
    host1(config-dhcp-local)#domain-name ispBoston
    
    host1(config-dhcp-local)#default-router 10.10.2.1
    
    host1(config-dhcp-local)#lease 0 0 10
    
    host1(config-dhcp-local)#ip dhcp-local limit atm 5
    
    
    
  7. Configure the SDX client.
  8. host1(config)#sscc primary address 10.10.1.2 port 3310
    
    host1(config)#sscc enable
    
    host1(config)#sscc retryTimer 200
    

[Contents] [Prev] [Next] [Index] [Report an Error] [No Frames]