topic Asa Dhcprelay for two networks in Network Security

Asa Dhcprelay for two networks

Marcin chojna — Tue, 12 Mar 2019 01:26:08 GMT

Hi,

The question is am I able to run dhcprelay for two separate networks?

config like this:

dhcprelay server xxx.xxx.xxx.xxx INT1

dhcprelay server xxx.xxx.xxx.xxx INT2

dhcprelay enable inside

dhcprelay enable dmz1

dhcprelay timeout 60

Thanks in advice

Marcin

Asa Dhcprelay for two networks

James Leinweber — Wed, 10 Apr 2013 13:56:57 GMT

I believe this was added in 9.0.

-- Jim Leinweber, WI State Lab of Hygiene

Asa Dhcprelay for two networks

Marcin chojna — Wed, 10 Apr 2013 14:03:25 GMT

Hi,

Do you have any doc about this?

Asa Dhcprelay for two networks

James Leinweber — Wed, 10 Apr 2013 14:35:44 GMT

Quoting from the asa 9.0 command line configuration guide:

http://www.cisco.com/en/US/customer/docs/security/asa/asa90/configuration/guide/basic_dhcp.html#wp1251885

-------

dhcprelay server ip_address if_name

Example:

hostname(config)# dhcprelay server 201.168.200.4 outside

Specifies the IP address of a DHCP server on a different interface from the DHCP client.

You can use this command up to ten times to identify up to ten servers.

--------

I think they added this at the same time as they added "ipv6 dhcprelay ...".

Note that all of the listed servers will get all of the DHCP client requests from all of the enabled subnets. First reply wins.

-- Jim Leinweber, WI State Lab of Hygiene

Asa Dhcprelay for two networks

Marcin chojna — Wed, 10 Apr 2013 15:14:51 GMT

This is not the case.

Those servers are working , but relaying ip addresses to two networks for clients is not working

Asa Dhcprelay for two networks

James Leinweber — Wed, 10 Apr 2013 17:51:10 GMT

I haven't finished qualifying this in my test lab, but I do see DHCP discover requests being forwarded to two different relay servers. In my configuration (ASA 5520 running 9.0(2)) I have multiple interfaces (some subinterfaces) A, B, C, with

dhcprelay server xxxx A

dhcprelay server yyyy B

dhcprelay enable C

A DHCP client on network C is forwarding to both xxxx and yyyy (wireshark captures) as expected.

I won't have actual DHCP servers set up for complete tests on this for another day or two.

-- James Leinweber, WI State Lab of Hygiene

Asa Dhcprelay for two networks

Marcin chojna — Wed, 10 Apr 2013 18:09:36 GMT

Hi ,

To be honest I have sam production setup like you .

Bur asking about :

dhcprelay enable D there is the diffrence.

My setup is ASA 5510 and 8.2