When enabling DHCP-security on a VLAN, the connected Host does not get IP address:

Below is the configuration on the VLAN:

vlans {

  VLANXX {

    vlan-id XX;

    l3-interface irb.XX;

    forwarding-options {

      dhcp-security {

        arp-inspection;

        ip-source-guard;

        ipv6-source-guard;

      }

    }

    vxlan {

      vni 40100XX;

    }

  }

A DHCP binding is created on the switch as shown:

admin@switch> show dhcp-security binding

10.32.XX .XX 62:8c:ae:fd:XX:XX VLANXX 3592 BOUND ge-0/0/0.0

But the host does not receive the DHCP offer.

Also, we see the below messages in DHCP traces:

Aug XX 10:45:42.902024 [MSTR][ERROR] jdhcpd_security_packet_handle: Mismatch in Server ID, Discarding the DHCPACK packet

Post removing the DHCP-security commands, The end host receives the IP address.

Workaround:

• Disable DHCP-security

Resolution:

• Internal PR : https://gnats.juniper.net/web/default/1819453#description_tab
• Upgrade the device to one of the resolved version