Chapter 8 Managing Dhcp Clients - Juniper EX3400 Features Manual

CHAPTER 8
Managing DHCP Clients
Using External AAA Authentication Services with DHCP
Copyright © 2017, Juniper Networks, Inc.
Using External AAA Authentication Services with DHCP on page 101
Configuring Passwords for Usernames on page 102
Creating Unique Usernames for DHCP Clients on page 103
Specifying the Maximum Number of DHCP Clients Per Interface on page 106
DHCP Local Server Handling of Client Information Request Messages on page 107
Enabling Processing of Client Information Requests on page 108
The extended DHCP local server, including DHCPv6 local server, and the extended DHCP
relay agent, including DHCPv6 relay agent, support the use of external AAA authentication
services, such as RADIUS, to authenticate DHCP clients. When the extended DHCP local
server or relay agent receives a discover PDU from a client, the extended DHCP application
contacts the AAA server to authenticate the DHCP client. The extended DHCP application
can obtain client addresses and DHCP configuration options from the external AAA
authentication server.
NOTE: This section uses the term extended DHCP application to refer to both
the extended DHCP local server and the extended DHCP relay agent.
The external authentication feature also supports AAA directed logout. If the external
AAA service supports a user logout directive, the extended DHCP application honors the
logout and responds as though it were requested by a CLI management command. All
of the client state information and allocated resources are deleted at logout. The extended
DHCP application supports directed logout using the list of configured authentication
servers you specify with the
hierarchy level.
profile-name]
You can configure either global authentication support or group-specific support.
You must configure the
username-include
The statement is not required and does not cause DHCP to use authentication
password
if the username-include statement is not included.
statement at the
authentication-server
statement to enable the use of authentication.
[edit access profile
101