Example: Configure Unicast RPF to Accept DHCP and BOOTP Packets

To accept Bootstrap Protocol (BOOTP) packets and Dynamic Host Configuration Protocol (DHCP) packets, you must define a filter that accepts all packets with a source address of 0.0.0.0 and a destination address of 255.255.255.255, as shown in the following example:

[edit firewall]

filter rpf-special-case-dhcp-bootp {

    term allow-dhcp-bootp {

        from {

            source-address {

                0.0.0.0/32;

            }

            destination-address {

                255.255.255.255/32;

            }

        }

        then {

            count rpf-dhcp-bootp-traffic; 

            accept; 

        }

    }

    term default {

        then {

            log;

            reject;

        }

    }

}

[edit] 

interfaces {

    so-0/0/0 {

        unit 0 {

            family inet {

                rpf-check fail-filter rpf-special-case-dhcp-bootp;

            }

        }

    }

}