topic Firewall and DHCP in Network Security

Firewall and DHCP

JAYESH RAMAIYA — Mon, 11 Mar 2019 22:25:55 GMT

We have a Cisco 5505 ASA fireawll at a remote site.

I can get the firewall to issue the IP addresses to the pc's, Is there a way for the pc's to get their IP addresses directly from our DHCP server?

Regards

Jay

Firewall and DHCP

mvsheik123 — Wed, 08 Feb 2012 12:45:43 GMT

Hi Jayesh,

We need more information on how and where the DHCP server is located. Here are couple of scenarios..

1. DHCP server and PCs are located inside the network - then nothing to do on ASA. You need to do necessary config on L3 switch inside (if there is any).

2. DHCP server and PCs are on different segments of ASA or at remote L2L vpn tunnel end. You need to configure ASA as DHCP relay agent.Check the below links.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008075fcfb.shtml

https://supportforums.cisco.com/community/netpro/security/firewall/blog/2011/01/07/asa-pix-dhcp-relay-through-vpn-tunnel

hth

Firewall and DHCP

JAYESH RAMAIYA — Wed, 08 Feb 2012 13:12:35 GMT

Thanks for the reply.

We have 10 pc's and an ASA in a remote office.

The DHCP server is located at our head office which is about 3 miles away. We want the pc's to pick up the IP addresses from the DHCP server.

I have read that EZVPN is an easy tool that can be used for this type of scenerio

Regards

Jay

Firewall and DHCP

mvsheik123 — Wed, 08 Feb 2012 15:46:06 GMT

May be.. iam not sure about that. I have easyVPN setup with local ASA acting as DHCP server for internal cleints but not central DHCP server. Lets see if experts confirm on this.

Thx