We are setting up a new ASA VPN Concentrator that uses the local ISC DHCP server for IP address assignments.
The DHCPDISCOVER packets from the ASA are logged in /var/log/dhcpd.log. The DHCPOFFER packets sent to the ASA are recorded in the log. If I restart dhcpd, I see in dhcpd.leases that entries for the leases have been created with a binding state of free.
The problem is that the ASA never relays the DHCPREQUEST packet to complete the lease that woule result in the VPN connection being established.
What causes an ASA not to relay the DHCPREQUEST packet?