PXE boot on 802.1x enabled networks on cisco 3850 denali

[Jeffrey Jones]

Trying to get a brand new machine that is in the field to PIX boot server, need an acl that can work for multiple sites as each site has its own server via the dhcp helper pointed to DHCP server, and each scope has its own.

[Aravind Ravichandran · Accepted solution]

Hi,

You can try to create a ACL only with PXE boot related ports.Something similar like this.

ip access-list extended ACL-Default

permit udp any eq bootpc any eq bootps
permit udp any any eq 4011 (PXE)
permit udp any any eq 67 (DHCP)
permit udp any any eq 69 (TFTP)
deny ip any any