topic Re: There is no support for DHCP in Network Security

how to configure MAC-IP address reservation in ASA 5515. Under DHCP server, not getting any options.

sharathpk0912 — Fri, 21 Feb 2020 13:41:49 GMT

how to configure MAC-IP address reservation in ASA 5515. Under DHCP server, not getting any options.

Hey im not a firewall

Mark Malone — Tue, 12 Jan 2016 11:10:50 GMT

Hey im not a firewall engineer but just seen this

http://www.experts-exchange.com/questions/22611358/IP-exclusion-command-on-Cisco-ASA.html

http://www.experts-exchange.com/questions/24157890/Excluding-ip-address-from-dhcp-scope-on-a-Cisco-Pix.html

There is no support for DHCP

Karsten Iwen — Tue, 12 Jan 2016 15:09:02 GMT

There is no support for DHCP-reservation on the ASA. As shown the are "workarounds" (aka dirty tricks) but IMO it's not worth going that way. The focus of DHCP on the ASA is more or less for the home-office but it's not meant to be a fully featured DHCP-server.

Re: There is no support for DHCP

Jay Johnston — Thu, 20 Feb 2020 16:23:25 GMT

This feature is now supported on ASA in version 9.13(1) and later

Example:

Magnus-5506-Desk# sh run dhcpd
dhcpd dns 192.168.1.22
dhcpd domain cisco.com
dhcpd option 4 ip 172.18.124.1
!
dhcpd address 192.168.100.100-192.168.100.200 inside
dhcpd enable inside
dhcpd reserve-address 192.168.100.199 ecb5.fa0f.988b inside
!
Magnus-5506-Desk#

Re: There is no support for DHCP

Marvin Rhoads — Fri, 21 Feb 2020 05:21:39 GMT

@Jay Johnston that's interesting. I don't see reference to that new feature in the release notes.

It doesn't even seem to be in the command reference!

https://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/A-H/cmdref1/d2.html

Re: There is no support for DHCP

Jay Johnston — Fri, 21 Feb 2020 13:29:48 GMT

Yep, i'll work on getting that fixed

Re: There is no support for DHCP

arthurbarrett — Mon, 24 Feb 2020 12:13:02 GMT

Ha Ha!

I was about to ask the same thing!

Release notes do not mention this new feature... I'm looking at replacing an aging ASA5505+2911 Branch Router with a single FirePower 1010 which runs ASA 9.13(1) and this dhcpd reserve-address feature would be really really useful because that's one of the things the 2911 does which the ASA never could.

Can you update this thread when you've got the documentation updated?