topic Re: ASA 5506x DHCP failing in Network Security

ASA 5506x DHCP failing

mx121 — Thu, 13 Oct 2022 12:50:19 GMT

Hello.

I have redundant 5506x and frequently the FW will not hand out an address to either a PC or phone. If a forced failover or power cycle occurs, it fixes the issue until it occurs again. This configuration has been working for years. Inside interface is configured with 3 sub-interfaces and DHCP is configured to only hand out address for the inside LAN. Lease time is 1 week. Stats and Binding show no errors or the lack of IP's available.

Thanks in advance for any ideas.

Re: ASA 5506x DHCP failing

balaji.bandi — Thu, 13 Oct 2022 14:26:55 GMT

can you post the ASA code running and some config snippets ? is the ASA acting as DHCP Server ?

Re: ASA 5506x DHCP failing

Marius Gunnerud — Thu, 13 Oct 2022 14:35:31 GMT

This sounds very buggy. What version ASA are you running? If you are running a slightly older version it might be an idea to upgrade to the latest "star" release.

Re: ASA 5506x DHCP failing

MHM Cisco World — Thu, 13 Oct 2022 15:27:46 GMT

first the DHCP is not replicate between active and standby.
second for your issue I will make deep look to see the solution.

when this issue happened again can you share

show dhcpd binding

Re: ASA 5506x DHCP failing

mx121 — Sun, 16 Oct 2022 00:04:38 GMT

This box has been running for several years, no problem. The DHCP issue has
randomly started happening. As said, reloading or failing over to the
secondary FW "fixes" the problem.

Cisco Adaptive Security Appliance Software Version 9.8(2)
Firepower Extensible Operating System Version 2.2(2.52)
Device Manager Version 7.8(2)

Serial Number: JAD241800HA

dhcpd dns 204.186.110.76 204.186.80.251
dhcpd lease 604800
dhcpd auto_config outside
!
dhcpd address 192.168.1.100-192.168.1.200 inside
dhcpd enable inside
!

Re: ASA 5506x DHCP failing

MHM Cisco World — Sun, 16 Oct 2022 11:37:05 GMT

dhcpd auto_config outside

are you use asa as dhcp client, i.e. config DHCP in OUT interface?

as I know the ASA failover not support DHCP client, it support DHCP server and DHCP relay.