topic Re: DHCP Reservations on Firepower 1010 in Network Security

DHCP Reservations on Firepower 1010

MP13 — Mon, 18 Mar 2024 07:57:35 GMT

Hi,

We have a Firepower 1010 that we'd like to move DHCP to from a Windows Server as it's the last server we have left in our old domain now that everything is in Azure AD instead.

In order to do this we need to add some DHCP reservations in for devices that are configured to use DHCP but have the same IP every time. There doesn't appear to be a way to do this in FDM and it seems like the commands in FlexConnect are also blocked.

Is there any way to do this or do I need to find a different device to act as the DHCP server? I think I could run it on a 2960-X that we have at the network core as well which would give me more DHCP control if it wasn't possible on the Firepower.

Re: DHCP Reservations on Firepower 1010

Rob Ingram — Mon, 18 Mar 2024 08:07:10 GMT

@MP13 unfortunately that is not possible using FDM, nor with using FlexConfig

Re: DHCP Reservations on Firepower 1010

MHM Cisco World — Mon, 18 Mar 2024 08:09:03 GMT

Did you try

dhcpd reserve-address

In flex config and not work?

If Yes then you can use 2960-X as dhcp serve.

MHM

Re: DHCP Reservations on Firepower 1010

Mark Elsen — Mon, 18 Mar 2024 08:10:26 GMT

- In general you are better off when looking into DHCP appliances , and separating dhcp services from networking equipment ,

Re: DHCP Reservations on Firepower 1010

MP13 — Mon, 18 Mar 2024 13:50:55 GMT

Thank you all for the clarification. We'll go with the 2960-X route.

Re: DHCP Reservations on Firepower 1010

MP13 — Mon, 18 Mar 2024 13:51:12 GMT

Yes, unfortunately it's a blacklisted command so is not accepted.

Re: DHCP Reservations on Firepower 1010

Mark Elsen — Mon, 18 Mar 2024 14:23:21 GMT

>... We'll go with the 2960-X route.
- The reasons why DHCP appliances are better because vendors will offer 'dhcp clusters' with unnoticed failover if one dhcp member fails (e.g,). also resulting better preserving of leases and other dhcp databases.
DHCP on switches can lead to race conditions w.r.t network servicing too.