Asa Dhcprelay for two networks

[Marcin chojna]

Hi,

The question is am I able to run dhcprelay for two separate networks?

config like this:

dhcprelay server  xxx.xxx.xxx.xxx INT1

dhcprelay server xxx.xxx.xxx.xxx INT2

dhcprelay enable inside

dhcprelay enable dmz1

dhcprelay timeout 60

Thanks in advice

Marcin

[James Leinweber]

I believe this was added in 9.0.

-- Jim Leinweber, WI State Lab of Hygiene

[Marcin chojna]

Hi,

Do you have any doc about this?

[James Leinweber]

Quoting from the asa 9.0 command line configuration guide:

http://www.cisco.com/en/US/customer/docs/security/asa/asa90/configuration/guide/basic_dhcp.html#wp1251885

-------

dhcprelay server ip_address if_name

Example:

hostname(config)# dhcprelay server 201.168.200.4 outside

Specifies the IP address of a DHCP server on a different interface from the DHCP client.

You can use this command up to ten times to identify up to ten servers.

--------

I think they added this at the same time as they added "ipv6 dhcprelay ...".

Note that all of the listed servers will get all of the DHCP client requests from all of the enabled subnets.  First reply wins.

-- Jim Leinweber, WI State Lab of Hygiene

[Marcin chojna]

This is not the case.

Those servers are working  , but relaying ip addresses to two networks for clients  is not working 

[James Leinweber]

I haven't finished qualifying this in my test lab, but I do see DHCP discover requests being forwarded to two different relay servers.   In my configuration (ASA 5520 running 9.0(2)) I have multiple interfaces (some subinterfaces) A, B, C, with

    dhcprelay server xxxx A

    dhcprelay server yyyy B

    dhcprelay enable C

A DHCP client on network C is forwarding to both xxxx and yyyy (wireshark captures) as expected. 

I won't have actual DHCP servers set up for complete tests on this for another day or two.

-- James Leinweber, WI State Lab of Hygiene

[Marcin chojna]

Hi ,

To be honest I have sam production setup like you .

Bur asking about :

dhcprelay enable D there is the diffrence.

My setup  is ASA 5510 and 8.2