SRX

Hello,

i have a ScreenOS config like this:

set interface trust dhcp relay server-name "1.2.3.4"
set interface trust dhcp relay server-name "1.2.3.5"
set interface trust dhcp relay vpn
set interface trust dhcp relay service

Now, i wanna migrate to JunOS config. It seems there are two ways.

1) set forwarding-options dhcp-relay group dhcp interface fe-0/0/1
set forwarding-options dhcp-relay server-group dhcp-server address 1.2.3.4
set forwarding-options dhcp-relay server-group dhcp-server address 1.2.3.5
set forwarding-options dhcp-relay active-server-group dhcp-server
set security zones security-zone trust interfaces fe-0/0/1 host-inbound-traffic system-services dhcp

2)set forwarding-options helpers bootp interface fe-0/0/1

set forwarding-options helpers bootp server 1.2.3.4

set forwarding-options helpers bootp server 1.2.3.5

set forwarding-options helpers bootp vpn

set forwarding-options helpers bootp relay-agent-option

set security zones security-zone trust interfaces fe-0/0/1 host-inbound-traffic system-services dhcp

Please, can you tell me which way is the right and what are the differences  between the two methods?

bye,

Steffi

Hello,

I would like to inform you that you see two ways of conigurating DHCP relay on SRX becasue of the fact that one way is the traditional DHCP relay configuration which is now obsolete and not recommended on SRX. The other way is the new JDHCP (Junos DHCP) which is recommended and is more powerful.

In your update above the first set of configuaration is for the new JDCHP Relay configuration on SRX and the second set of configuration is for the traditional DHCP relay server configruation.

Since the new JDHCP is the recommended one, hence i would suggest you to use that configraution set.

You can refer the below document for more details on the same:-

https://www.juniper.net/techpubs/en_US/junos15.1/topics/example/dhcp-subscriber-access-dhcp-relay-minimum-configuration.html

Apart from the configuration you also need to allow DHCP as a host inbound service on the respective interfaces participating in it i.e. client facing and server facing. Please refer the below KB article for the same:-

https://kb.juniper.net/InfoCenter/index?page=content&id=KB21132&actp=search

Hope this helps 🙂

Thanks,
Pulkit Bhandari
Please mark my response as Solution Accepted if it Helps, Kudos are Appreciated too. 🙂

Thank you so much for your fast and informational answer! 

have a nice day 🙂

steffi