SRX Next-Gen Firewalls

Sure thing! I marked 21 as the best answer. Thanks again. Have a great weekend!

I'm glad everything is sorted out now. That was an interesting problem! Could you please mark post #13 or #21 as answer to help out people who might come across this thread so they don't have through lots of posts? ------------------------------ Nikolay ...

Yep.... diabling DHCP proxy fixed it... tested again with 1681 and everything worked. Wow. One check box resulted in months of grief. Genuinely I cannot thank you enough. This was giving me gray hairs.

Yes, DHCP proxy, DHCP relay, same thing. Very useful when you have a centralized DHCP server, out of broadcast reach, but really not necessary when the server is listening in the same broadcast domain as the clients. And, now we learned, sometimes terrible ...

I was looking but can't seem to find an option, unless DHCP proxy == DHCP relay. I'll ask around on the Cisco community and let you know.

See if there's an option on the WLC for it to NOT relay DHCP requests. Basically turn off everything DHCP-related for 1681 on the WLC. I think my original theory was right. On the SRX, the DHCP server interacts with the ARP table. ------------------------------ ...

That did it ! Changing the DHCP server to the PA-220 fixed the issues. I guess I could live with that as a workaround. I can't thank you enough for this. Genuinely. I've been fighting with this for a very long time and it never once occurred to me ...