SRX

last person joined: 12 hours ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  Complicated DHCP Relay Situation (Feeling Blonde)

    Posted 08-02-2011 15:24

    I have been pulling my hair out here and would like some input, because this can't be that complicated

     

    First a Quick Network Layout

     

    Oklahoma Site

    1 SRX240 internal Subnet 192.168.200.0/24

    DHCP Server Onsite

    VPN to Texas Site 1 T-1 Router

     

    Texas Site 1

    1 SRX 240 with 4 T-1 MLPPP and public /27 Subnet with 4 Sites connected by a Point to Point Microwave System

    No DHCP internal

     

    Texas Site 2

    1 SRX 240 internal Subnet  192.168.210.0/24

    DHCP Server Onsite

    Connected to all Sites with source nat off based on destination address and to Oklahoma Site thru Texas Site 1 VPN

     

    Texas Site 3

    1 SRX 240 internal Subnet  192.168.220.0/24

    DHCP On Router

    Connected to all Sites with source nat off based on destination address and to Oklahoma Site thru Texas Site 1 VPN

     

    Texas Site 4

    1 SRX 240 internal Subnet  192.168.230.0/24

    DHCP On Router

    Connected to all Sites with source nat off based on destination address and to Oklahoma Site thru Texas Site 1 VPN

     

    Texas Site 5

    1 SRX 240 internal Subnet  192.168.240.0/24

    DHCP On Router

    Connected to all Sites with source nat off based on destination address and to Oklahoma Site thru Texas Site 1 VPN

     

    I can ping from any site to any site by IP and get correct non nat ip.

     

    I am trying to take DHCP off of all routers and also do a split DHCP pool between Oklahoma And Texas. The issue I am having is that I can't get it to work at all from anywhere to anywhere except on local lan. Here is the current config I am using. I have this config applied on Texas Site 2,3,4,5 and also on Oklahoma 1 I have tried with and without the VPN;

     

    below is the correct simple config.

     

    [edit forwarding-options helpers bootp]
    **********@**********# show
    relay-agent-option;
    description **********;
    server 192.168.210.230;
    server 192.168.200.230;
    vpn;
    interface {
        vlan.0;
    }

     

    Please Advise



  • 2.  RE: Complicated DHCP Relay Situation (Feeling Blonde)
    Best Answer

    Posted 08-03-2011 02:08

    have you allowed bootp in the host-inbound-traffic section of that vlan.0 interface? Thats typically the first thing everyone forgets.

     

    set security zones security-zone <zone name> interface vlan.0 host-inbound-traffic system-services bootp