Copyright © 2010, Juniper Networks, Inc.
Release Highlights
7
Release 11.1.1
By default, inclusion of DHCP options returned by RADIUS as part of DHCP OFFER
and ACK responses is disabled. To enable DHCP Local Server to include the DHCP
options returned by RADIUS, use the
radius-dhcp-options
keyword with the
ip
dhcp-local auth include
command. For example:
host1(config)
#
ip dhcp-local auth include radius-dhcp-options
DHCP Local Server can support up to 312 bytes of DHCP options data in DHCP
packets. While DHCP Local Server gives precedence to DHCP options returned by
RADIUS over locally configured DHCP options, inclusion of the DHCP options
returned by RADIUS is based on the space available in the DHCP options buffer. As a
result, some options may be dropped while the others are included in DHCP OFFER
and ACK responses.
The following DHCP options configured from RADIUS are not supported:
The following commands have been enhanced to support the inclusion of
RADIUS-returned DHCP options as part of OFFER and ACK responses.
Change in existing behavior
: Existing feature extended as described here. In
lower-numbered releases, DHCP Local Server did not include DHCP options returned
from the RADIUS server as part of OFFER and ACK responses. This is no longer the
case.
z
0 - Pad Option
z
67 - Bootfile name
z
1 - Subnet Mask
z
77 - User class
z
13 - Boot File Size Option
z
80 - Rapid commit
z
50 - Requested IP Address
z
81 - client FQDN
z
51 - IP Address Lease time
z
90 - Authentication
z
52 - Option Overload
z
93 - client system
z
53 - DHCP Message Type
z
94 - client NDI
z
54 - Server Identifier
z
98 - User Auth
z
55 - Parameter Request List
z
116 - Auto Config
z
56 - Message
z
118 - Subnet Selection
z
57 - Maximum DHCP Message
Size
z
122 - Code CCC
z
58 - Renewal Time Value
z
124 - Vendor Identifying Vendor class
z
59 - Rebinding Time Value
z
125 - Vendor Specific Information
z
60 - Vendor class identifier
z
128 - TFTP Server IP Address
z
61 - Client-identifier
z
129 - Call Server IP Address
z
66 - TFTP server name
z
All options beyond 132
z
ip dhcp-local auth include
z
show ip dhcp-local auth config
