SRX Services Gateway
Highlighted
SRX Services Gateway

SRX320 DHCP issue with Smartphones

‎10-24-2019 06:42 AM

Hi

I hope can someone help here as usual. 

I have a Juniper SRX 320 which is working fine with 2 DHCP server pools. I am getting IP on my laptops and also connected devices except the smartphones that we have at home. Please see the attached configuration and any prompt help is really appreciated.

Attachments

5 REPLIES 5
Highlighted
SRX Services Gateway

Re: SRX320 DHCP issue with Smartphones

‎10-24-2019 07:13 AM

For a start I would highly recommend you to upgrade Junos to the recommended JTAC release. There were quite some bugs in the 15.1X49-D70 Junos version.

 

Secondly you have configured dhcp both the old and new way and only partly configured the new way.

 

Suggestions to your configuration:

 

1. Please remove anything below "system services dhcp" and "access address-assignment".

2. Add the following config lines and commit.

3. Validate and revert with the result here.

 

set system services dhcp-local-server group int interface irb.8
set system services dhcp-local-server group int interface irb.9


set access address-assignment pool int family inet network 192.168.8.0/24
set access address-assignment pool int family inet range scope low 192.168.8.30
set access address-assignment pool int family inet range scope high 192.168.8.99
set access address-assignment pool int family inet dhcp-attributes grace-period 86400
set access address-assignment pool int family inet dhcp-attributes name-server 207.164.234.193
set access address-assignment pool int family inet dhcp-attributes name-server 198.235.214.4
set access address-assignment pool int family inet dhcp-attributes router 192.168.8.1
set access address-assignment pool int family inet network 192.168.9.0/24
set access address-assignment pool int family inet range scope low 192.168.9.30
set access address-assignment pool int family inet range scope high 192.168.9.99
set access address-assignment pool int family inet dhcp-attributes grace-period 86400
set access address-assignment pool int family inet dhcp-attributes name-server 207.164.234.193	
set access address-assignment pool int family inet dhcp-attributes name-server 198.235.214.4
set access address-assignment pool int family inet dhcp-attributes router 192.168.9.1

I hope this helps - and remember to upgrade your SRX 🙂

 


--
Best regards,

Jonas Hauge Klingenberg
Juniper Ambassador & Technology Architect, SEC DATACOM A/S (Denmark)
Highlighted
SRX Services Gateway

Re: SRX320 DHCP issue with Smartphones

‎10-24-2019 07:39 AM

I had to mention that VLAN 8 and 9 are going to different SSIDs. Now, I cannot connect on any devices to Wifi on VLAN 8 however I can connect my laptops to wifi on VLAN 9. I am still experiencing the same iphone connectivity issue on VLAN 9 and ofcourse VLAN 8.

I changed the config as per your suggestion. please see the attachment. 

 

Thanks. 

Attachments

Highlighted
SRX Services Gateway
Solution
Accepted by topic author etoghi
‎10-24-2019 11:38 AM

Re: SRX320 DHCP issue with Smartphones

‎10-24-2019 08:32 AM

Sorry, I managed to clone the configuration wrongly - so the 192.168.8.0/24 was overwritten. Please try this instead:

 

(and I will still recommend you to upgrade the Junos on your SRX320)

 

delete access address-assignment
set access address-assignment pool irb-9 family inet network 192.168.9.0/24
set access address-assignment pool irb-9 family inet range scope low 192.168.9.30
set access address-assignment pool irb-9 family inet range scope high 192.168.9.99
set access address-assignment pool irb-9 family inet dhcp-attributes grace-period 86400
set access address-assignment pool irb-9 family inet dhcp-attributes name-server 198.235.214.4
set access address-assignment pool irb-9 family inet dhcp-attributes name-server 207.164.234.193
set access address-assignment pool irb-9 family inet dhcp-attributes router 192.168.9.1
set access address-assignment pool irb-8 family inet network 192.168.8.0/24
set access address-assignment pool irb-8 family inet range scope low 192.168.8.30
set access address-assignment pool irb-8 family inet range scope high 192.168.8.99
set access address-assignment pool irb-8 family inet dhcp-attributes grace-period 86400
set access address-assignment pool irb-8 family inet dhcp-attributes name-server 207.164.234.193
set access address-assignment pool irb-8 family inet dhcp-attributes name-server 198.235.214.4
set access address-assignment pool irb-8 family inet dhcp-attributes router 192.168.8.1

--
Best regards,

Jonas Hauge Klingenberg
Juniper Ambassador & Technology Architect, SEC DATACOM A/S (Denmark)
Highlighted
SRX Services Gateway

Re: SRX320 DHCP issue with Smartphones

‎10-24-2019 10:20 AM

Your configuration resolved the DHCP issue and everything was working fine (internet access and DHCP). Then I decided to follow your recommendation and upgrade the JUNOS to JTAC recommended release.

The upgrade went well however, I lost internet access. I checked ppp0 interface and it was UP/Down. What could be wrong as the SRX was connected to internet before the JUNOS upgrade? I did not touch my PPPOE cridentials.

Please have a look at the attached latest configuration.

Attachments

Highlighted
SRX Services Gateway

Re: SRX320 DHCP issue with Smartphones

‎10-24-2019 11:24 AM

I'm glad that the DHCP part is now working as expected 🙂

 

I must admit that I'm of very little help regarding PPPoE as I have never needed anykind of dialer/ppp configuration. Everything I have been managing has been DHCP assigned or static.

 

For other to be able to help, please share 'show interfaces pp0', 'show pppoe statistics' and 'show ppp statistics' - maybe you are able to pin point the issue yourself by looking at the output?

 

Otherwise try to enable pppoe debug and look at the logs: https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/pppoe-traceoptions.html

 

If no obvious error is seen, you could downgrade back to the 15.1X49 software train, but then use the release which was previously JTAC recommended: 15.1X49-D170.

 

But - as 15.1X49 are going end of Engineering support in a very few months, this is only an intermediate step to reestablish internet access until the issue is solved.


--
Best regards,

Jonas Hauge Klingenberg
Juniper Ambassador & Technology Architect, SEC DATACOM A/S (Denmark)
Feedback