On Thursday, June 13, 2013 01:49:23 PM Sebastian Wiesinger wrote: > Actually you're right. 1000 are free. That would be 1000 > DHCP bindings on the whole box. Could work in this > scenario... Is it true that the jdhcpd runs on the PFE? > The bootp helper seems to punt *all* DHCP traffic (Port > 69) going trough the box to the RE which is kind of > scary... I just hope you can firewall it on the RE.
IIRC, it's a control plane process. It would be nice if it can happen in the line card, but I don't have any definitive information on that. It is also good to ensure that if you have any Loopback interfaces in this VRF (as you would in a typical broadband type deployment), you check that you have allowed DHCP/BOOTP packets through the any group-applied firewalls, otherwise you could chase your tail trying to figure out what's going on. Mark.
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
