SRX

 View Only
last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
Expand all | Collapse all

Home Lab DHCP not working

  • 1.  Home Lab DHCP not working

    Posted 10-21-2022 20:15
    I am trying to get DHCP working on a SRX-300 but it is not working. Any help will be appreciated: 

    admin@Home-FW> show configuration
    version 20.2R3.9;

    }
    services {
    ftp;
    ssh;
    telnet;
    netconf {
    ssh;
    }
    dhcp-local-server {
    group homelab {
    interface irb.0;
    }
    }
    web-management {
    https {
    system-generated-certificate;
    interface [ vlan.0 ge-0/0/5.0 ];
    }
    }
    }
    name-server {
    8.8.8.8;
    8.8.4.4;
    }
    syslog {
    archive size 100k files 3;
    user * {
    any emergency;
    }
    file messages {
    any notice;
    authorization info;
    }
    file interactive-commands {
    interactive-commands any;
    }
    }
    max-configurations-on-flash 5;
    max-configuration-rollbacks 5;
    license {
    autoupdate {
    url https://ae1.juniper.net/junos/key_retrieval;
    }
    }
    phone-home {
    server https://redirect.juniper.net;
    rfc-compliant;
    }
    }
    security {
    screen {
    ids-option untrust-screen {
    icmp {
    ping-death;
    }
    ip {
    source-route-option;
    tear-drop;
    }
    tcp {
    syn-flood {
    alarm-threshold 1024;
    attack-threshold 200;
    source-threshold 1024;
    destination-threshold 2048;
    timeout 20;
    }
    land;
    }
    }
    }
    nat {
    source {
    rule-set trust-to-untrust {
    from zone trust;
    to zone untrust;
    rule source-nat-rule {
    match {
    source-address 0.0.0.0/0;
    }
    then {
    source-nat {
    interface;
    }
    }
    }
    }
    }
    }
    policies {
    from-zone trust to-zone trust {
    policy trust-to-trust {
    match {
    source-address any;
    destination-address any;
    application any;
    }
    then {
    permit;
    }
    }
    }
    from-zone trust to-zone untrust {
    policy trust-to-untrust {
    match {
    source-address any;
    destination-address any;
    application any;
    }
    then {
    permit;
    }
    }
    }
    }
    zones {
    security-zone trust {
    host-inbound-traffic {
    system-services {
    all;
    }
    protocols {
    all;
    }
    }
    interfaces {
    irb.0 {
    host-inbound-traffic {
    system-services {
    dhcp;
    }
    }
    }
    irb.4;
    irb.5;
    irb.6;
    ge-0/0/5.0;
    }
    }
    security-zone untrust {
    screen untrust-screen;
    interfaces {
    ge-0/0/0.0 {
    host-inbound-traffic {
    system-services {
    dhcp;
    tftp;
    https;
    }
    }
    }
    ge-0/0/7.0 {
    host-inbound-traffic {
    system-services {
    dhcp;
    tftp;
    }
    }
    }
    }
    }
    }
    }
    interfaces {
    ge-0/0/0 {
    description Internet;
    unit 0 {
    family inet {
    dhcp {
    vendor-id Juniper-srx300;
    }
    }
    }
    }
    ge-0/0/1 {
    description to-netgear-poe-sw-port8;
    unit 0 {
    family ethernet-switching {
    interface-mode trunk;
    vlan {
    members all;
    }
    }
    }
    }
    ge-0/0/2 {
    unit 0 {
    family ethernet-switching {
    interface-mode access;
    vlan {
    members vlan-trust;
    }
    }
    }
    }
    ge-0/0/3 {
    unit 0 {
    family ethernet-switching {
    interface-mode access;
    vlan {
    members homelab-vlan4;
    }
    }
    }
    }
    ge-0/0/4 {
    unit 0 {
    family ethernet-switching {
    vlan {
    members vlan-trust;
    }
    }
    }
    }
    ge-0/0/5 {
    unit 0 {
    family inet {
    address 192.168.100.1/24;
    }
    }
    }
    ge-0/0/6 {
    unit 0 {
    family ethernet-switching {
    vlan {
    members vlan-trust;
    }
    }
    }
    }
    ge-0/0/7 {
    unit 0 {
    family inet {
    dhcp {
    vendor-id Juniper-srx300;
    }
    }
    }
    }
    irb {
    unit 0 {
    family inet {
    address 192.168.1.1/24;
    }
    }
    unit 4 {
    family inet {
    address 192.168.2.1/24;
    }
    }
    unit 5 {
    family inet {
    address 192.168.3.1/24;
    }
    }
    unit 6 {
    family inet {
    address 192.168.6.1/24;
    }
    }
    }
    }
    access {
    address-assignment {
    pool pool-trust {
    family inet {
    network 192.168.1.0/24;
    range r1 {
    low 192.168.1.20;
    high 192.168.1.254;
    }
    dhcp-attributes {
    maximum-lease-time 7200;
    name-server {
    8.8.8.8;
    8.8.4.4;
    }
    router {
    192.168.1.1;
    }
    }
    }
    }
    }
    }
    vlans {
    homelab-vlan4 {
    vlan-id 4;
    l3-interface irb.4;
    }
    homelab-vlan5 {
    vlan-id 5;
    l3-interface irb.5;
    }
    homelab-vlan6 {
    vlan-id 6;
    l3-interface irb.6;
    }
    vlan-trust {
    vlan-id 3;
    l3-interface irb.0;
    }
    }
    protocols {
    l2-learning {
    global-mode switching;
    }
    rstp {
    interface all;
    }
    }


  • 2.  RE: Home Lab DHCP not working

    Posted 10-22-2022 12:29
    Looks like the only dhcp server setup here is the original defaul trust one in 192.168.1.0/24.

    If you are looking to have this in the other vlans you need to create the server and attribute configuration for the other subnets as outline here.
    https://www.juniper.net/documentation/us/en/software/junos/dhcp/topics/topic-map/dhcp-server-configuration.html

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: Home Lab DHCP not working

    Posted 10-22-2022 19:55
    Thank you Steve, 

    I only configured one pool to test before proceeding to setup the other subnets. i just cannot get the client to obtain ip address from pool 192.168.1.0/24 when plugging into ge-0/0/2 

    Server group is configured 
    Address pool is configured 
    vlan configured 
    IRB configured with the default gateway for the subnet 192.168.1.1 
    IRB added to the security zone trust 
    allowed host-inbound protocol and services all. 
    security policy trust to trust permitting any to any 

    I am not sure what i am missing. I got it to work before using an old code 15.4 but upgraded to 20.2R3.9. 

    Thank you once again for checking 
    Nils. 



  • 4.  RE: Home Lab DHCP not working

    Posted 10-24-2022 18:17
    found the issue i deleted the following and DHCP started working. 

    [edit protocols]
    - l2-learning {
    - global-mode switching;
    - }