Re: DHCP server on interface vlan tagging (sub-interface)

Hi,

interface and system services dhcp seems to be OK.

Although if you don't use Q-in-Q tunneling, you can safely swap flexible-vlan-tagging with vlan-tagging.

Your problem may be coused by firewall filters or configuration of security zone you have configured ge-0/0/1 with.

Here is an example of properly conigured security zone:

security {
    zone{
           security-zone LAN {
                interfaces {
                    ge-0/0/1.20 {
                        host-inbound-traffic {
                            system-services {
                                dhcp;
                            }
                        }
                    }
               }
          }
     }
}

Have you configured any security policy related to 'junos-host' zone? If so, check if it permits dhcp traffic.

Few months ago I've configured SRX cluster with similar DHCP configuration and till now it works perfect. So there must be a simple solution of your problem. Complete config od your device would be helpful.

Regards,