I assume you're getting an IP eventually, correct? Or are you just not getting any IP addresses?
If you see a delay compared to the SSG platform, maybe you should open a TAC case. SRX is still having issues even with the 10.x release. Can't hurt to get TAC involve as your config seems to be correct.
I have a SRX650 cluster running DHCP relay and it's fairly quick. No major issues with relaying. Both for 802.1x ports and non-802.1x ports. I'm running the latest 10.x release.
-Mike
Hi Mike,
Yes, finally user will get their ip address. But before they get the ip address, they will get the 169.x.x.x ip address first.
But it better than previous configuration, when didn't put bootp on host-inbound service.
I already open ticket to TAC regarding dhcp drop packet, hopefully they will found the solution soon.
That's strange. If you find a solution from TAC, please post. Be interested to know the solution. I used a SRX250 and an SRX650 cluster both doing DHCP relay and don't have the issue you're experiencing.
-Mike
Hi Mike,
does at your srx there have dhcp relay drop packet also ?
No drop packets in the DHCP relay stats.
-Mike
so, what is wrong with my srx or my configuration ?
Not sure what could be wrong. Seems to have everything configured properly. What did JTAC have to say?
Also, what firmware are you running?
-Mike
Nope, i have been waiting for they answer since 30 Dec 2009.
for now running 10.0R2
I'm running the same version also. Weird you're not hearing back from them. You should call back and have the case escalated.
Did you do any trace on the SRX or run a wireshark on the end station and/or the DHCP server?
Nope, i haven't to run wireshark or any tracer tools.
Now I can't do any trace, because i face new issue at this srx.
http://forums.juniper.net/t5/SRX-Services-Gateway/failed-to-upgrade-u-boot/m-p/32733#M1876
so many issue on this project....
by the way thanks to sharing knowledge.