ASA 5506x DHCP failing

[mx121]

Hello.

I have redundant 5506x and frequently the FW will not hand out an address to either a PC or phone. If a forced failover or power cycle occurs, it fixes the issue until it occurs again. This configuration has been working for years. Inside interface is configured with 3 sub-interfaces and DHCP is configured to only hand out address for the inside LAN. Lease time is 1 week. Stats and Binding show no errors or the lack of IP's available.

Thanks in advance for any ideas.

[balaji.bandi]

can you post the ASA code running and some config snippets ? is the ASA acting as DHCP Server ?

[Marius Gunnerud]

This sounds very buggy.  What version ASA are you running?  If you are running a slightly older version it might be an idea to upgrade to the latest "star" release.

[MHM Cisco World]

first the DHCP is not replicate between active and standby.
second for your issue I will make deep look to see the solution.

when this issue happened again can you share 

show dhcpd binding

[mx121]

This box has been running for several years, no problem. The DHCP issue has
randomly started happening. As said, reloading or failing over to the
secondary FW "fixes" the problem.

Cisco Adaptive Security Appliance Software Version 9.8(2)
Firepower Extensible Operating System Version 2.2(2.52)
Device Manager Version 7.8(2)

Serial Number: JAD241800HA


dhcpd dns 204.186.110.76 204.186.80.251
dhcpd lease 604800
dhcpd auto_config outside
!
dhcpd address 192.168.1.100-192.168.1.200 inside
dhcpd enable inside
!

[MHM Cisco World]

dhcpd auto_config outside

are you use asa as dhcp client, i.e. config DHCP in OUT interface?

as I know the ASA failover not support DHCP client, it support DHCP server and DHCP relay.