Check-Mac-Address

These scenarios show how the check-mac-address feature works for the DHCP server

Test Check MAC Address

Description

The check-mac-address option filters packets if there are differences between the MAC address found at the ethernet header and the MAC address found in the DHCP packet. To check this option, you should send packets with these differences and enable this option to see if warnings appear in your logs. Also, this test checks how the server behaves under normal conditions.

Scenario

Step 1: Set the following configuration in DUT0 :

set interfaces ethernet eth0 address 10.0.0.1/24
set service dhcp-server shared-network dhcp subnet 10.0.0.0/24 start 10.0.0.5 stop 10.0.0.5
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 2: Run the command system journal show | tail on DUT0 and check whether the output contains the following tokens:

DHCPDISCOVER from 10:00:00:00:00:02 via eth0

Step 3: Modify the following configuration lines in DUT0 :

set service dhcp-server check-mac-address

Step 4: Run the command system journal clear on DUT0.

Step 5: Run the command system journal show | tail on DUT0 and check whether the output does not contain the following tokens:

DHCPDISCOVER from 10:00:00:00:00:02 via eth0

Step 6: Run the command system journal show | tail on DUT0 and check whether the output contains the following tokens:

MAC received in DHCP packet (10:00:00:00:00:02) is different than source MAC in ethernet header (10:00:00:00:00:01)

Step 7: Set the following configuration in DUT1 :

set interfaces ethernet eth0 mac '10:00:00:00:00:05'
set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0'

Step 8: Modify the following configuration lines in DUT1 :

set interfaces ethernet eth0 address dhcp

Step 9: Run the command interfaces ethernet eth0 show on DUT1 and check whether the output contains the following tokens:

10.0.0.5

Step 10: Run the command service dhcp-server show leases main | grep 10.0.0.5 on DUT0 and check whether the output contains the following tokens:

10:00:00:00:00:05

Test Check MAC Address VRF