topic Re: PIX 501 dhcp bind mac-address in Network Security

PIX 501 dhcp bind mac-address

Steffen Frederiksen — Mon, 11 Mar 2019 20:07:59 GMT

Hi guys

I use the dhcp demon (dhcp server) on my PIX 501 to give my local clients automatic ip addresses, my dhcpd config is here:

dhcpd address 192.168.251.20-192.168.251.40 inside

dhcpd dns 8.8.8.8 8.8.4.4

dhcpd lease 3600

dhcpd ping_timeout 750

dhcpd domain lokalnet

dhcpd enable inside

I wanna now if it possible to make a static lease on pix dhcpd.. So a client with a specific mac address olways obtain the same ip address whitin the dhcp scoope that the pix 501 i serving.. If yes, please proviode me with a config example 🙂

Thanks and best regards,

Steffen, Denmark.

Re: PIX 501 dhcp bind mac-address

PAUL GILBERT ARIAS — Wed, 16 Mar 2011 19:40:13 GMT

It is not possible my friend. Here are the option for the command "dhcpd":

http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/df.html#wp1025497

Re: PIX 501 dhcp bind mac-address

Steffen Frederiksen — Wed, 16 Mar 2011 20:08:42 GMT

damned .. 🙂

While i have your attention:

My outside interface is obtain ip from my isp dhcp..

if i want to port forward port 51234 to a local host with ip 192.168.251.20 and also make a permit in an access-list.. can you proviode me with a config examble 🙂

Re: PIX 501 dhcp bind mac-address

PAUL GILBERT ARIAS — Wed, 16 Mar 2011 20:20:09 GMT

you can use the following:

static (inside,outside) tcp interface 51234 192.168.251.20 51234

access-l outside_in permit tcp any interface outside eq 51234

access-group outside_in in interface outside

That should redirect the traffic that gets to the IP of the outside interface on port 51234 to the internal IP 192.168.251.20

That should help you.

Here is the command static:

http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/s.html#wp1026694

Here is for the access-list:

http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/ab.html#wp1067755

Re: PIX 501 dhcp bind mac-address

PAUL GILBERT ARIAS — Thu, 17 Mar 2011 22:16:26 GMT

is everything clear now?

If things are fine please mark the question as answered.

Re: PIX 501 dhcp bind mac-address

Steffen Frederiksen — Fri, 18 Mar 2011 07:22:51 GMT

Sorry Paul. This all is fine.

Thank you for your help indeed!