topic Re: ASA5520 / vlans / dhcp server in Network Security

ASA5520 / vlans / dhcp server

jeff_green — Mon, 11 Mar 2019 19:11:13 GMT

Hi,

Running V8.2.(2) on an ASA5520 and I'm trying to configure dhcp servers on vlans.

Is this actually possible or am I just misreading the Command Reference ?

I can configure the VLANs sub-interfaces fine (IP address, netmask, vlanid, nameif, security level, etc)

but when I try to configure a dhcp server via

dhcpd address <start IP>-<end IP> <interface-name>

I get an error

"IP address range <start IP> to <end IP> is not within the subnet addresses <IP2> to <IP3> on the <interface-name> interface"

where <IP2> and <IP3> are some "crazy" IPs. Crazy is the sense that I can't figure out their relationship to the IPs allocated

to the sub-interfaces / vlans.

TIA,

andre.ortega — Thu, 18 Nov 2010 13:10:55 GMT

Hi,

The to should be in same range of the interface.

Sample:

interface outside ip: 192.168.1.1 255.255.255.0

dhcpd address 192.168.1.5-192.168.1.10 outside

Regards.

apothula — Thu, 18 Nov 2010 13:19:40 GMT

Hi Jeff,

Could you please provide us a relevant piece of config and also the error message you are seeing ?

Also, prlease find below the guide to setting up ASA as DHCPserver,

Cheers,

Nash.

jeff_green — Wed, 24 Nov 2010 15:26:20 GMT

Hi Avinash,

Well, I got this working by ditching the ASDM and using the CLI to get some sensible error reporting.

The DHCP address (pool) has to be well within the IP address range specified on the (sub) interface and that's even taking into

account the network & broadcast addresses plus that of the sub interface.

Many Thanks,