Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

Creating a Security Policy for DHCPv6

For the DHCPv6 server to allow DHCPv6 requests, you must create a security policy to enable DHCPv6 traffic. In this example, the zone my-zone allows DHCPv6 traffic from the zone untrust, and the ge-0/0/3.0 interface is configured with the IPv6 address 3000:1.

To create a security zone policy to allow DHCPv6:

  1. Create the zone and add an interface to that zone.
    [edit security zones]user@host# edit security-zone my-zone interfaces ge-0/0/3.0
  2. Configure host inbound traffic system services to allow DCHPv6.
    [edit security zones security-zone my-zone interfaces ge-0/0/3.0]user@host# set host-inbound-traffic system-services dhcpv6
  3. If you are done configuring the device, enter commit from configuration mode.

Modified: 2013-10-31