Related Documentation
- EX, MX Series
- Configuring How the Extended DHCP Local Server Determines Which Address-Assignment Pool to Use
- Using External AAA Authentication Services with DHCP
- Use of DHCP Option 50 and DHCPv6 IA_NA Option to Request a Specific IP Address
- Graceful Routing Engine Switchover
- Verifying and Managing DHCP Local Server Configuration
- Example: Minimum Extended DHCP Local Server Configuration
- Example: Extended DHCP Local Server Configuration with Optional Pool Matching
- EX, MX, PTX Series
- Tracing Extended DHCP Operations
- M, MX Series
- Configuring Address-Assignment Pools
- Example: Configuring a DHCP Firewall Filter to Protect the Routing Engine
- MX Series
- Dynamic Profile Attachment to DHCP Subscriber Interfaces Overview
- Subscriber Management Unified ISSU Support
Extended DHCP Local Server Overview
You can enable the router or switch to function as an extended DHCP local server and configure the extended DHCP local server options on the router (or switch). The extended DHCP local server provides an IP address and other configuration information in response to a client request. The DHCP local server supports the attachment of dynamic profiles and also interacts with the local AAA Service Framework to use back-end authentication servers, such as RADIUS, to provide subscriber authentication or DHCP client authentication. You can configure dynamic profile and authentication support on a global basis or for a specific group of interfaces.
The extended DHCP local server enhances traditional DHCP server operation by utilizing centralized address-assignment pools. The address-assignment pools are managed independently of the DHCP local server and can be shared by different client applications.
You can also configure the extended DHCP local server to support IPv6 clients. Both DHCP local server and DHCPv6 local server support the specific address request feature, which enables you to assign a particular address to a client. See DHCPv6 Local Server Overview for information about the DHCPv6 local server feature.
![]() | Note: You cannot configure the extended DHCP local server and extended DHCP relay on the same interface. |
To configure the extended DHCP local server on the router (or switch), you include the dhcp-local-server statement at the [edit system services] hierarchy level. See the [edit system services dhcp-local-server] Hierarchy Level for the complete DHCP local server syntax.
This overview covers:
Interaction Among the DHCP Client, Extended DHCP Local Server, and Address-Assignment Pools
The pattern of interaction between the DHCP local server, the DHCP client, and address-assignment pools is the same regardless of whether the software installation is on a router or a switch. Technically, the codes operates in the same manner, regardless of the hardware platform. However, there are some difference in the details of usage.
- On routers—In a typical carrier edge network configuration, the DHCP client is on the subscriber’s computer, and the DHCP local server is configured on the router.
- On switches—In a typical network configuration, the DHCP client is on an access device, such as a personal computer, and the DHCP local server is configured on the switch.
IThe following steps provide a high-level description of the interaction among the DHCP local server, DHCP client, and address-assignment pools:
- The DHCP client sends a discover packet to one or more DHCP local servers in the network to obtain configuration parameters and an IP address for the subscriber (or DHCP client).
- Each DHCP local server that receives the discover packet then searches its address-assignment pool for the client address and configuration options. Each local server creates an entry in its internal client table to keep track of the client state, then sends a DHCP offer packet to the client.
- On receipt of the offer packet, the DHCP client selects the DHCP local server from which to obtain configuration information and sends a request packet indicating the DHCP local server selected to grant the address and configuration information.
- The selected DHCP local server sends an acknowledgement packet to the client that contains the client address lease and configuration parameters. The server also installs the host route and ARP entry, and then monitors the lease state.
Providing DHCP Client Configuration Information
When the extended DHCP application receives a response from an external authentication server, the response might include information in addition to the IP address and subnet mask. The extended DHCP application uses the information from the authentication grant for the response the DHCP application sends to the DHCP client. The DHCP application can either send the information in its original form or the application might merge the information with local configuration specifications. For example, if the authentication grant includes an address pool name and a local configuration specifies DHCP attributes for that pool, the extended DHCP application merges the authentication results and the attributes in the reply that the server sends to the client.
A local configuration is optional — a client can be fully configured by the external authentication service. However, if the external authentication service does not provide client configuration, you must configure the local address-assignment pool to provide the configuration for the client. When a local configuration specifies options, the extended DHCP application adds the local configuration options to the offer PDU the server sends to the client. If the two sets of options overlap, the options in the authentication response from the external service take precedence.
When you use RADIUS to provide the authentication, the additional information might be in the form of RADIUS attributes and Juniper Networks VSAs. Table 1 lists the information that RADIUS might include in the authentication grant. See RADIUS Attributes and Juniper Networks VSAs Supported by the AAA Service Framework for a complete list of RADIUS attributes and Juniper Networks VSAs that the extended DHCP applications supports for subscriber access management or DHCP management.
Table 1: Information in Authentication Grant
Attribute Number | Attribute Name | Description |
---|---|---|
RADIUS attribute 8 | Framed-IP-Address | Client IP address |
RADIUS attribute 9 | Framed-IP-Netmask | Subnet mask for client IP address (DHCP option 1) |
Juniper Networks VSA 26-4 | Primary-DNS | Primary domain server (DHCP option 6) |
Juniper Networks VSA 26-5 | Secondary-DNS | Secondary domain server (DHCP option 6) |
Juniper Networks VSA 26-6 | Primary-WINS | Primary WINS server (DHCP option 44) |
Juniper Networks VSA 26-7 | Secondary-WINS | Secondary WINS server (DHCP option 44) |
RADIUS attribute 27 | Session-Timeout | Lease time |
RADIUS attribute 88 | Framed-Pool | Address assignment pool name |
Juniper Networks VSA 26-109 | DHCP-Guided-Relay-Server | DHCP relay server |
Minimal Configuration for Clients
The extended DHCP local server provides a minimal configuration to the DHCP client if the client does not have DHCP option 55 configured. The server provides the subnet mask of the address-assignment pool that is selected for the client. In addition to the subnet mask, the server provides the following values to the client if the information is configured in the selected address-assignment pool:
- router—A router (or switch) located on the client’s subnet. This statement is the equivalent of DHCP option 3.
- domain name—The name of the domain in which the client searches for a DHCP server host. This is the default domain name that is appended to hostnames that are not fully qualified. This is equivalent to DHCP option 15.
- domain name server—A Domain Name System (DNS) name server that is available to the client to resolve hostname-to-client mappings. This is equivalent to DHCP option 6.
DHCP Local Server and Address-Assignment Pools
In the traditional DHCP server operation, the client address pool and client configuration information reside on the DHCP server. With the extended DHCP local server, the client address and configuration information reside in centralized address-assignment pools, which are managed independently of the DHCP local server and which can be shared by different client applications.
The extended DHCP local server also supports advanced pool matching and the use of named address ranges. You can also configure the local server to use DHCP option 82 information in the client PDU to determine which named address range to use for a particular client. The client configuration information, which is configured in the address-assignment pool, includes user-defined options, such as boot server, grace period, and lease time.
Configuring the DHCP environment that includes the extended DHCP local server requires two independent configuration operations, which you can complete in any order. In one operation, you configure the extended DHCP local server on the router and specify how the DHCP local server determines which address-assignment pool to use. In the other operation, you configure the address-assignment pools used by the DHCP local server. The address-assignment pools contain the IP addresses, named address ranges, and configuration information for DHCP clients. See Configuring Address-Assignment Pools for details about creating and using address-assignment pools.
![]() | Note: The extended DHCP local server and the address-assignment pools used by the server must be configured in the same logical system and routing instance. |
DHCP Liveness Detection
Liveness detection for DHCP subscriber IP (or DHCP client IP) sessions utilizes an active liveness detection protocol to institute liveness detection checks for relevant clients. Clients are expected to respond to liveness detection requests within a specified amount of time. If the responses are not received within that time for a given number of consecutive attempts, then the liveness detection check fails and a failure action is implemented. You can configure
![]() | Note: DHCP liveness detection either globally or per DHCP group. |
Related Documentation
- EX, MX Series
- Configuring How the Extended DHCP Local Server Determines Which Address-Assignment Pool to Use
- Using External AAA Authentication Services with DHCP
- Use of DHCP Option 50 and DHCPv6 IA_NA Option to Request a Specific IP Address
- Graceful Routing Engine Switchover
- Verifying and Managing DHCP Local Server Configuration
- Example: Minimum Extended DHCP Local Server Configuration
- Example: Extended DHCP Local Server Configuration with Optional Pool Matching
- EX, MX, PTX Series
- Tracing Extended DHCP Operations
- M, MX Series
- Configuring Address-Assignment Pools
- Example: Configuring a DHCP Firewall Filter to Protect the Routing Engine
- MX Series
- Dynamic Profile Attachment to DHCP Subscriber Interfaces Overview
- Subscriber Management Unified ISSU Support
Published: 2013-04-01
Related Documentation
- EX, MX Series
- Configuring How the Extended DHCP Local Server Determines Which Address-Assignment Pool to Use
- Using External AAA Authentication Services with DHCP
- Use of DHCP Option 50 and DHCPv6 IA_NA Option to Request a Specific IP Address
- Graceful Routing Engine Switchover
- Verifying and Managing DHCP Local Server Configuration
- Example: Minimum Extended DHCP Local Server Configuration
- Example: Extended DHCP Local Server Configuration with Optional Pool Matching
- EX, MX, PTX Series
- Tracing Extended DHCP Operations
- M, MX Series
- Configuring Address-Assignment Pools
- Example: Configuring a DHCP Firewall Filter to Protect the Routing Engine
- MX Series
- Dynamic Profile Attachment to DHCP Subscriber Interfaces Overview
- Subscriber Management Unified ISSU Support