ASA 5550 on a stick with DHCP relay

[ruud.manders]

Hi all,

I need to implement an ASA 5550 for firewall purposes.

The current design is:

        CORE

          / \

          |  |  10G

         /   \

         DIST

         | | | |  1G

        Multiple

        Access

The ASA is only firewalling for a few VLANs.

The Inside interface of the firewall is connected to the DIST with a trunk, subinterfaces are defined for the VLANs.

The Outside interface of the firewall is connected to the DIST with a L3 connection.

A default route is configured.

Now i have the following issue:

DHCP is required on the VLANs behind the firewall, so i enabled DHCP relay.

The packets are arriving at the DHCP server, then at the Outside interface and then they got lost.

The IP address of the subinterface isnt reachable from the outside network.

If i set a host with a static ip, everything works just fine.

Any ideas how to get the DHCP relay working or should i implement the ASA differently?

Thanks.

Regards,

Ruud

[Jouni Forss]

Hi,

I have not had to configure the DHCP Relay that often and when I have had to then there usually has been no problems. Been a pretty basic setup.

Maybe this document might help you troubleshoot your situation

http://www.cisco.com/en/US/products/ps12726/products_configuration_example09186a0080c144d0.shtml

- Jouni