dhcp-relay
Syntax
dhcp-relay {
access-profile profile-name;
active-server-group server-group-name;
password password-string;
delimiter delimiter-character;
domain-name domain-name-string;
interface-description (device-interface | logical-interface);
option-82 <circuit-id> <remote-id>;
user-prefix user-prefix-string;
vlan-tags;
}
}
dhcpv6 {
access-profile profile-name;
active-server-group server-group-name;
}
password password-string;
delimiter delimiter-character;
domain-name domain-name-string;
interface-description (device-interface | logical-interface);
interface-name interface-name;
mac-address mac-address;
user-prefix user-prefix-string;
vlan-tags;
}
}
duplicate-clients incoming-interface;
dynamic-profile profile-name {
aggregate-clients (merge | replace);
use-primary primary-profile-name;
}
logical-system <current | default | logical-system-name>;
routing-instance <current | default | routing-instance-name>;
}
forward-snooped-clients (all-interfaces | configured-interfaces | non-configured-interfaces);
group group-name {
access-profile profile-name;
active-server-group server-group-name;
password password-string;
delimiter delimiter-character;
domain-name domain-name-string;
interface-description (device-interface | logical-interface);
interface-name interface-name;
mac-address mac-address;
user-prefix user-prefix-string;
vlan-tags;
}
}
dynamic-profile profile-name {
aggregate-clients (merge | replace);
use-primary primary-profile-name;
}
logical-system <current | default | logical-system-name>;
routing-instance <current | default | routing-instance-name>;
}
interface interface-name {
access-profile profile-name;
dynamic-profile profile-name {
aggregate-clients (merge | replace);
use-primary primary-profile-name;
}
exclude;
asymmetric-lease-time seconds;
asymmetric-prefix-lease-time seconds;
client-negotiation-match incoming-interface;
dual-stack dual-stack-group-name;
interface-client-limit number;
relay-source interface-name;
}
service-profile dynamic-profile-name;
short-cycle-protection <lockout-min-time seconds> <lockout-max-time seconds>;
upto upto-interface-name;
}
}
failure-action (clear-binding | clear-binding-if-interface-up | log-only);
method {
bfd {
version (0 | 1 | automatic);
minimum-interval milliseconds;
minimum-receive-interval milliseconds;
multiplier number;
session-mode(automatic | multihop | singlehop);
holddown-interval milliseconds;
}
}
}
asymmetric-lease-time seconds;
asymmetric-prefix-lease-time seconds;
client-negotiation-match incoming-interface;
dual-stack dual-stack-group-name;
interface-client-limit number;
relay-source interface-name;
}
option-number option-number;
equals (ascii ascii-string | hexadecimal hexadecimal-string) {
drop;
relay-server-group relay-server-group;
}
starts-with (ascii ascii-string | hexadecimal hexadecimal-string) {
drop;
relay-server-group relay-server-group;
}
}
remote-id-mismatch disconnect;
service-profile dynamic-profile-name;
short-cycle-protection <lockout-min-time seconds> <lockout-max-time seconds>;
}
failure-action (clear-binding | clear-binding-if-interface-up | log-only);
method {
bfd {
version (0 | 1 | automatic);
minimum-interval milliseconds;
minimum-receive-interval milliseconds;
multiplier number;
session-mode(automatic | multihop | singlehop);
holddown-interval milliseconds;
}
service-profile dynamic-profile-name;
}
}
asymmetric-lease-time seconds;
asymmetric-prefix-lease-time seconds;
client-negotiation-match incoming-interface;
dual-stack dual-stack-group-name;
interface-client-limit number;
relay-source interface-name;
}
option-number option-number;
equals (ascii ascii-string | hexadecimal hexadecimal-string) {
drop;
relay-server-group relay-server-group;
}
starts-with (ascii ascii-string | hexadecimal hexadecimal-string) {
drop;
relay-server-group relay-server-group;
}
}
remote-id-mismatch disconnect;
server-response-time seconds;
service-profile dynamic-profile-name;
short-cycle-protection <lockout-min-time seconds> <lockout-max-time seconds>;
}
dual-stack-group dual-stack-group-name {
access-profile profile-name;
password password-string;
delimiter delimiter-character;
domain-name domain-name-string;
interface-description (device-interface | logical-interface);
user-prefix user-prefix-string;
vlan-tags;
}
}
dynamic-profile profile-name {
aggregate-clients (merge | replace);
use-primary primary-profile-name;
}
failure-action (clear-binding | clear-binding-if-interface-up | log-only);
}
protocol-master (inet | inet6);
service-profile dynamic-profile-name;
short-cycle-protection <lockout-min-time seconds> <lockout-max-time seconds>;
}
duplicate-clients-in-subnet (incoming-interface | option-82):
dynamic-profile profile-name {
aggregate-clients (merge | replace);
use-primary primary-profile-name;
}
logical-system <current | default | logical-system-name>;
routing-instance <current | default | routing-instance-name>;
}
forward-snooped-clients (all-interfaces | configured-interfaces | non-configured-interfaces);
group group-name {
access-profile profile-name;
active-server-group server-group-name;
password password-string;
delimiter delimiter-character;
domain-name domain-name-string;
interface-description (device-interface | logical-interface);
interface-name interface-name;
option-82 [circuit-id] [remote-id];
user-prefix user-prefix-string;
}
vlan-tags;
}
dynamic-profile profile-name {
aggregate-clients (merge | replace);
use-primary primary-profile-name;
}
logical-system <current | default | logical-system-name>;
routing-instance <current | default | routing-instance-name>;
}
logical-system <current | default | logical-system-name>;
routing-instance <current | default | routing-instance-name>;
}
interface interface-name {
access-profile profile-name;
exclude;
failure-action (clear-binding | clear-binding-if-interface-up | log-only);
method {
bfd {
version (0 | 1 | automatic);
minimum-interval milliseconds;
minimum-receive-interval milliseconds;
multiplier number;
session-mode (automatic | multihop | singlehop);
holddown-interval milliseconds;
}
}
}
asymmetric-lease-time seconds;
client-discover-match <option60-and-option82 | incoming-interface>;
dual-stack dual-stack-group-name;
interface-client-limit number;
}
service-profile dynamic-profile-name;
short-cycle-protection <lockout-min-time seconds> <lockout-max-time seconds>;
upto upto-interface-name;
}
asymmetric-lease-time seconds;
asymmetric-prefix-lease-time seconds;
client-discover-match (option60-and-option82 | incoming-interface);
dual-stack dual-stack-group-name;
interface-client-limit number;
}
option-number option-number;
equals (ascii ascii-string | hexadecimal hexadecimal-string) {
drop;
relay-server-group relay-server-group;
}
starts-with (ascii ascii-string | hexadecimal hexadecimal-string) {
drop;
local-server-group local-server-group;
relay-server-group relay-server-group;
}
}
}
remote-id-mismatch disconnect;
service-profile dynamic-profile-name;
short-cycle-protection <lockout-min-time seconds> <lockout-max-time seconds>;
}
failure-action (clear-binding | clear-binding-if-interface-up | log-only);
method {
bfd {
version (0 | 1 | automatic);
minimum-interval milliseconds;
minimum-receive-interval milliseconds;
multiplier number;
session-mode (automatic | multihop | singlehop);
holddown-interval milliseconds;
}
}
}
asymmetric-lease-time seconds;
asymmetric-prefix-lease-time seconds;
client-discover-match (option60-and-option82 | incoming-interface);
dual-stack dual-stack-group-name;
interface-client-limit number;
}
option-number option-number;
equals (ascii ascii-string | hexadecimal hexadecimal-string) {
drop;
relay-server-group relay-server-group;
}
starts-with (ascii ascii-string | hexadecimal hexadecimal-string) {
drop;
local-server-group local-server-group;
relay-server-group relay-server-group;
}
}
}
}
remote-id-mismatch disconnect;
server-response-time seconds;
service-profile dynamic-profile-name;
short-cycle-protection <lockout-min-time seconds> <lockout-max-time seconds>;
}
Hierarchy Level
[edit forwarding-options],
[edit logical-systems logical-system-name forwarding-options],
[edit logical-systems logical-system-name routing-instances routing-instance-name forwarding-options],
[edit routing-instances routing-instance-name forwarding-options]
Release Information
Statement introduced in Junos OS Release 8.3.
Statement introduced in Junos OS Release 12.1 for EX Series switches.
Statement introduced in Junos OS Release 13.2X51 for the QFX Series.
Statement introduced in Junos OS Release 14.1X53-D20 for the OCX Series.
Description
Configure extended Dynamic Host Configuration Protocol (DHCP) relay and DHCPv6 relay options on the router or switch to enable the router (or switch) to function as a DHCP relay agent. A DHCP relay agent forwards DHCP request and reply packets between a DHCP client and a DHCP server.
DHCP relay supports the attachment of dynamic profiles and also interacts with the local AAA Service Framework to use back-end authentication servers, such as RADIUS, to provide subscriber authentication or client authentication. You can attach dynamic profiles and configure authentication support on a global basis or for a specific group of interfaces.
The extended DHCP and DHCPv6 relay agent options configured with the dhcp-relay and dhcpv6 statements are incompatible with the DHCP/BOOTP relay agent options configured with the bootp statement. As a result, the extended DHCP or DHCPv6 relay agent and the DHCP/BOOTP relay agent cannot both be enabled on the router (or switch) at the same time.
The remaining statements are explained separately. Search for a statement in CLI Explorer or click a linked statement in the Syntax section for details.
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.