Solved: Re: DHCP not receiving requests on ASA 5510

rgillis · ‎07-20-2010

Hi,

I want to have open wireless access for Clients that visit seperate from our network. I setup DHCP on interface 0/2 and though everything appears to be configured right it just isn't receiving or responding to DCHP requests. If I monitor DHCP stats on the interface it shows 1 pool 0 requests

Here is what I have done:

Enabled interface 0/2 - Provided IP 10.0.27.15 - Named "OpenInternet"

Enabled DHCP scope on "JustInternet" as 10.0.27.100-10.0.27.200

Plugged a laptop directly into 0/2.

Released and renewed IP on laptop with no response

Is there some additional security I need to allow? What am I missing? I've cut and pasted some snipits from the running config.

!
interface Ethernet0/2
nameif OpenInternet
security-level 0
ip address 10.0.27.15 255.255.255.0
!

!
dhcpd address 10.0.27.100-10.0.27.200 OpenInternet
dhcpd dns 8.8.8.8 8.8.4.4 interface OpenInternet
dhcpd enable OpenInternet
!

Message was edited by: Robert Gillis

mirober2 · ‎07-21-2010

Hi Robert,

The captures show that the client's DHCP DISCOVER packets are reaching the ASA, but the firewall is not responding for some reason. Have you tried disabling and re-enabling the dhcpd process since you started troubleshooting this to see if that makes a difference? Try:

asa(config)# no dhcpd enable OpenInternet

asa(config)# dhcpd enable OpenInternet

Power cycling the firewall might also help in the event that the dhcp_daemon process got stuck somehow.

If that still doesn't work, can you let us know what version of ASA code you are running ('show version')? Also, what operating system version is the cilent using?

-Mike

View solution in original post

bknoblau · ‎07-20-2010

Robert,

I am making the assumption that you plugging your laptop into 0/3 was a typo since you configured the interface on 0/2. It appears that you have configured the interface for dhcp properly. If you give your laptop a static IP address within the 10.0.27.x range are you able to ping the interface of the ASA when connected? In addition, could you attach the "show interface" output to this thread?

Regards,

BK