DHCP Outside Interface on a HA Cisco ASA 5505 pair - Help needed

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-03-2022 08:55 AM
HI all,
I have a HA pair of ASA 5505's in a small setup. The ISP wants to provide the Internet link with our end being given the IP via DHCP.
I have the ISP connection connected to a switch (on Vlan3) and the ASA's are trunked off a switch pair. So the IP needs to go on the Vlan, not on the actual Interface.
But my problem is that the ASA will not allow me to setup Vlan3 as a DHCP client. I get the error "ERROR: DHCP Client cannot be enabled while in Failover or Clustering mode"
Is there any other way around this ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-03-2022 09:06 AM
Failover Configuration Limitations
You cannot configure failover with these types of IP addresses:
IP addresses obtained through DHCP
IP addresses obtained through PPPoE
IPv6 addresses
so can you add edge router and then config ASA behind that router?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-03-2022 09:15 AM
what said was right, that is limitation, most of the Cluster or Actve/staby deployed in controller environment (means have own IP address space)
to mitigate you need to get any Router Like (rasberry Pi can do your work)
ISP---Rasberry Pi --Switch---ASA Cluster (just get an idea)

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-03-2022 04:42 PM
Adding an Edge router is not really an option, since the installation is in a different country, so I can only reach remotely
