[an error occurred while processing this directive][an error occurred while processing this directive]

Allowing DHCP Snooped Clients on Interfaces

You can explicitly enable or disable DHCP snooping support on specific interfaces the router and override the default configuration. If you disable DHCP snooping support, the interface drops snooped DHCP discover and request messages. You can manage DHCP snooping support globally, for a named group of interfaces, or for a specific interface within a named group.

Note: In JUNOS release 10.0 and earlier, DHCP snooping is enabled by default. In releases 10.1 and later, DHCP snooping is disabled by default.

  • To enable DHCP snooping support, include the allow-snooped-clients option to the overrides statement at the global, group, or interface hierarchy level.
  • To disable DHCP snooping support, include the no-allow-snooped-clients option to the overrides statement.

The following two examples show a configuration that enables DHCP snooping support for a group of interfaces and a configuration that disables support on a specific interface.

To enable DHCP snooping support on a group of interfaces:

  1. Specify the named group.
    [edit forwarding-options dhcp-relay]user@host# edit group boston
  2. Specify that you want to configure overrides.
    [edit forwarding-options dhcp-relay group boston]user@host# edit overrides
  3. Enable DHCP snooping support.
    [edit forwarding-options dhcp-relay group boston overrides]user@host# set allow-snooped-clients

To disable DHCP snooping support on a specific interface:

  1. Specify the named group of which the interface is a member.
    [edit forwarding-options dhcp-relay]user@host# edit group boston
  2. Specify the interface on which you want to disable DHCP snooping support.
    [edit forwarding-options dhcp-relay group boston]user@host# edit interface fe-1/0/1.2
  3. Specify that you want to configure overrides.
    [edit forwarding-options dhcp-relay group boston interface fe-1/0/1.2]user@host# edit overrides
  4. Disable DHCP snooping support on the interface.
    [edit forwarding-options dhcp-relay group boston interface fe-1/0/1.2 overrides]user@host# set no-allow-snooped-clients

Published: 2010-04-15

[an error occurred while processing this directive]