Configuring A Token For Dhcp Local Server Authentication - Juniper EX3400 Features Manual

Related
Documentation

Configuring a Token for DHCP Local Server Authentication

Related
Documentation
Copyright © 2017, Juniper Networks, Inc.
To delete a specific DHCP override setting at a particular hierarchy level, include the
statement with the appropriate subordinate statements. For example, to
overrides
delete the DHCP local server override
:
marin20
[edit system services dhcp-local-server]
user@host# delete group
To delete all DHCP override settings at a hierarchy level, include the
without any subordinate statements. For example, to delete all DHCP relay overrides
for interface , which is in group
fxp0.0
[edit forwarding-options dhcp-relay]
user@host# delete group
Overriding Default DHCP Local Server Configuration Settings on page 28
Extended DHCP Local Server Overview on page 22
Extended DHCP Relay Agent Overview on page 46
You can configure the local server to include a constant, unencoded token in the DHCP
forcerenew message as part of the authentication option it sends to clients. The client
compares the received token with a token already configured on the client. If the tokens
do not match, the DHCP client discards the forcerenew message. Use of the token provides
rudimentary protection against inadvertently instantiated DHCP servers.
(Optional) To configure the DHCP local server to include a token in the forcerenew
message sent to the client, for all clients:
Specify the token.
For DHCPv4:
[edit system services dhcp-local-server reconfigure]
user@host# set token
For DHCPv6:
[edit system services dhcp-local-server dhcpv6 reconfigure]
user@host# set token
To override the global configuration for a particular group of clients, include the statement
at the [edit system services dhcp-local-server group group-name reconfigure]
level or the
[edit system services dhcpv6 dhcp-local-server group group-name reconfigure]
hierarchy level.
Configuring Dynamic Client Reconfiguration of Extended Local Server Clients on page 114
token on page 299
interface-client-limit
marin20 overrides interface-client-limit
:
marin20
marin20 interface fxp0.0
8ysIU9E32k8r
8ysIU9E32k8r
Chapter 2: DHCP Local Server
setting for a group named
statement
overrides
overrides
hierarchy
31