topic Re: 3000 series and Multiple DHCP scopes (DHCP-relay) in Network Security

3000 series and Multiple DHCP scopes (DHCP-relay)

7j-greene — Fri, 21 Feb 2020 07:54:23 GMT

I need to send different DHCP options to users; however, I need to put certain groups in different subnets. Is it possible to setup the concentrator to relay for addresses from different scopes?

Re: 3000 series and Multiple DHCP scopes (DHCP-relay)

gfullage — Wed, 02 Feb 2005 05:10:48 GMT

v4.0 of the concentrator code added functionality for this. Under the Group, under the General tab, right down the bottom there's a DHCP Scope option. In here add the specific scope (subnet) that you want the concentrator to request addresses from from the DHCP server.

Keep in mind that your internal network needs routes for each of these scopes that point back to the inside interface of the concentrator.

See http://www.cisco.com/univercd/cc/td/doc/product/vpn/vpn3000/4_0/config/usermgt.htm#1893938, or the online help for details.

Re: 3000 series and Multiple DHCP scopes (DHCP-relay)

7j-greene — Wed, 02 Feb 2005 14:18:05 GMT

This looks like a global setting, and only one DHCP scope can be added... I need to have the concentrator request addresses from different scopes ie:

group 1 needs to have address in scope 172.16.1.0/24

group 2 needs to have address in scope 10.1.1.0/24

Re: 3000 series and Multiple DHCP scopes (DHCP-relay)

gfullage — Fri, 04 Feb 2005 01:02:55 GMT

Not sure what you mean by a global setting. Go under Group 1 and modify it, under the General tab you can add the scope in there. If you go under Group 2 you'll be able to add a different scope under its General tab.

Re: 3000 series and Multiple DHCP scopes (DHCP-relay)

7j-greene — Tue, 08 Feb 2005 20:45:25 GMT

- Configuration

- System

- IP Routing

- DHCP Relay

a. Enable 'Enabled' checkbox

b. Select Forward to

c. Address == 192.168.10.8 255.255.255.0

- Address Management

- Assignment

a. Enable 'Use DHCP'

- User Management

- Groups

- Select 'groupA'

- Modify Group

- Click General tab

- Enter 'DHCP Network Scope' x.x.x.x

- Select 'groupA'

- Remove Address Pool

Now I get the following error:

118 02/08/2005 13:29:00.720 SEV=3 DHCPDBG/39 RPT=34

DHCP discover timeout: no response from polled servers (xid 3821297335)

I can ping the server, and it is serving up this scope to other devices (just not from the concentrator)

Re: 3000 series and Multiple DHCP scopes (DHCP-relay)

QMITCisco — Wed, 03 May 2006 22:36:51 GMT

I am having the same problem. Did you ever find a solution to this?

Re: 3000 series and Multiple DHCP scopes (DHCP-relay)

jan.nielsen — Mon, 19 Jun 2006 21:04:57 GMT

your problem is probably that the net you are assigning to that group via dhcp has to be routed to the box, cause the reply from the dhcp server will be sent to the adress that you type in the dhcp scope field, the vpn3k will then listen for dhcp offers on that address.