Description


Alert : The CLI configuration syntax in this article applies to the legacy DHCP daemon (DHCPD). DHCP will eventually be deprecated in favor of the newer JDHCP daemon. As of Junos OS 15.1X49-D60 , the legacy service will continue to run as normal but the following behaviors will change:
  • The CLI configuration syntax described in this article will be hidden.
  • J-Web will read and configure DHCP using the new configuration syntax (JDHCP).
This change will not affect previous versions of Junos OS releases (such as Junos OS 12.3X48, 12.1X47, 12.1X46, etc). Please refer to  TSB16991 - Legacy DHCPD (DHCP Daemon) configuration syntax will be hidden starting from 15.1X49-D60 [juniper.net] for more details on the transition from DHCPD to JDHCP.

This article describes how to configure an SRX Series device as a DHCP client and provides information about verifying and troubleshooting your configuration.

For other topics, go to the SRX Getting Started main page.

Symptoms

Configure an SRX Series device to be a DHCP client.

Solution


This section contains the following:


Note: An SRX Series device can act as a DHCP client, DHCP server, and DHCP relay agent at the same time, but you cannot configure more than one DHCP role on a single interface.

For information about configuring the device as a DHCP server, see KB15754 - SRX Getting Started - Configure DHCP Server [juniper.net] .

J-Web Configuration

To configure an SRX Series device to act as a DHCP client, you specify the interface on which you want to enable the DHCP client and specify DHCP as a host-inbound service for the security zone to which the interface is bound.

To specify the interface on which to enable the DHCP client:

  1. Select Configure>Services>DHCP>DHCP Client .
  2. Click Add .
  3. In the Interface box, type the interface on which to enable the DHCP client (for example, fe-0/0/7).
  4. Click OK .

To specify DHCP as a host-inbound service for the security zone to which the interface is bound:
  1. Select Configure>Security>Zones .
  2. Click the security zone that you want to modify (for example, untrust).
  3. Under Interfaces Configuration, select the interface in the zone that you want to serve as a DHCP client, and click Edit .
  4. In the Host Inbound Traffic Option section, under System Services, select Allow Selected Services .
  5. In the Allowed Selected Services box, select dhcp , and click Add .
  6. Click OK .
  7. To apply your changes, click Apply .
  8. If you are finished configuring the device, click Commit to commit the configuration.

CLI Configuration

To configure an SRX Series device to act as a DHCP client:

  1. Specify the interface (for example, fe-0/0/7) on which to enable the DHCP client.

user@host# set interfaces fe-0/0/7 unit 0 family inet dhcp

  1. For the security zone (for example, untrust) to which the interface is bound, specify DHCP as a host-inbound service.

user@host# set security zones security-zone untrust interfaces fe-0/0/7.0 host-inbound-traffic system-services dhcp


Technical Documentation

Administration Guide for Security Devices


Verification

To verify that the DHCP client configuration, use the following operational commands:

user@host> show system services dhcp client
user@host> show system services dhcp client statistics

For sample output for these commands, see http://www.juniper.net/techpubs/software/junos-security/junos-security10.4/junos-security-admin-guide/index.html?config-DHCP-Client-config-task.html#config-DHCP-Client-config-task .


Troubleshooting

If you are having problems getting a DHCP client IP address, you can initiate a DHCP renewal with the following operational command:

user@host> request system services dhcp renew