10-20-2020 03:16 AM
Hi all,
We are looking at implementing ISE profiling and we have a question around DHCP probes/switch configuration.
As you can see from the attached images, we current run DHCP on a windows server and the firewall interface is set to relay to this server. Our understanding is that for DHCP probes to work we need an IP Address Helper configured on an SVI for each VLAN, so on that basis do we set the IP address helper IPs to the firewall interface IP and the ISE server or direct to the windows DHCP server and the ISE server and turn off IP relaying on the firewall?
Thanks in advance.
10-20-2020 03:41 AM
10-21-2020 08:58 AM
I would add another DHCP Relay on the firewall pointing to ISE, that should do the trick.
10-22-2020 02:50 PM
Don’t.
Device sensor provides DHCP info among others without unscalable relaying.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide