dhcp-relay

Syntax

dhcp-relay {authentication {password password-string;username-include {circuit-type;delimiter delimiter-character;domain-name domain-name-string;logical-system-name;mac-address;option-60;option-82 [circuit-id] [remote-id];routing-instance-name;user-prefix user-prefix-string;}}duplicate-clients-on-interface;dynamic-profile profile-name <aggregate-clients (merge | replace) | use-primary primary-profile-name>;overrides {allow-snooped-clients;always-write-giaddr;always-write-option-82;client-discover-match <option60-and-option82>;disable-relay;interface-client-limit number;layer2-unicast-replies;no-allow-snooped-clients;no-arp;proxy-mode;replace-ip-source-with; giaddrsend-release-on-delete;trust-option-82;}relay-option-60 {vendor-option {(equals | starts-with) (ascii match-string | hexadecimal match-hex) {default-local-server-group local-server-group-name |(default-relay-server-group server-group-name |drop);}default-local-server-group local-server-group-name |(default-relay-server-group server-group-name |drop);}}relay-option-82 {circuit-id {prefix prefix;use-interface-description (logical | device);}}server-group {server-group-name {server-ip-address;}}active-server-group server-group-name;group group-name {active-server-group server-group-name;authentication {password password-string;username-include {circuit-type;delimiter delimiter-character;domain-name domain-name-string;logical-system-name;mac-address;option-60;option-82 [circuit-id] [remote-id];routing-instance-name;user-prefix user-prefix-string;}}dynamic-profile profile-name <aggregate-clients (merge | replace) | use-primary primary-profile-name>;overrides {allow-snooped-clients;always-write-giaddr;always-write-option-82;client-discover-match <option60-and-option82>;disable-relay;interface-client-limit number;layer2-unicast-replies;no-allow-snooped-clients;no-arp;proxy-mode;replace-ip-source-with; giaddrsend-release-on-delete;trust-option-82;}relay-option-60 {vendor-option {(equals | starts-with) (ascii match-string | hexadecimal match-hex) {default-local-server-group local-server-group-name |(default-relay-server-group server-group-name |drop);}default-local-server-group local-server-group-name |(default-relay-server-group server-group-name |drop);}}relay-option-82 {circuit-id {prefix prefix;use-interface-description (logical | device);}}interface interface-name {exclude; overrides {allow-snooped-clients;always-write-giaddr;always-write-option-82;client-discover-match <option60-and-option82>;disable-relay;interface-client-limit number;layer2-unicast-replies;no-allow-snooped-clients;no-arp;proxy-mode;replace-ip-source-with;send-release-on-delete;trust-option-82;}upto upto-interface-name;}}traceoptions {flag all;flag database;flag state;flag interface;flag rtsock;flag packet;flag packet-option;flag io;flag ha;flag ui;flag general;flag fwd;flag rpd;file file-name {<files number>;<size maximum-file-size>;<match regex>;<world-readable | no-world-readable>;}}}

Hierarchy Level

[edit forwarding-options],[edit logical-systems logical-system-name forwarding-options],[edit logical-systems logical-system-name routing-instances routing-instance-name forwarding-options],[edit routing-instances routing-instance-name forwarding-options]

Release Information

Statement introduced in Junos OS Release 8.3.

traceoptions option introduced in Junos OS Release 8.5.

relay-option-60 option introduced in Junos OS Release 9.0.

authentication option introduced in Junos OS Release 9.1.

Description

Configure extended Dynamic Host Configuration Protocol (DHCP) relay options on the router and enable the router to function as a DHCP relay agent. A DHCP relay agent forwards DHCP request and reply packets between a DHCP client and a DHCP server.

DHCP relay supports the attachment of dynamic profiles and also interacts with the local AAA Service Framework to use back-end authentication servers, such as RADIUS, to provide subscriber authentication. You can attach dynamic profiles and configure authentication support on a global basis or for a specific group of interfaces.

The extended DHCP relay agent options configured with the dhcp-relay statement are incompatible with the DHCP/BOOTP relay agent options configured with the bootp statement. As a result, the extended DHCP relay agent and the DHCP/BOOTP relay agent cannot both be enabled on the router at the same time.

The statements are explained separately.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.