DHCP relay issue in Site to Site VPN

[geloangelo00]

Hi Cisco Support,

We have encountered a problem on our dhcp relay going to Site to Site VPN. ACL is permit any any for testing purpose.

10.124.0.x/23 Client <> ASA <> S2S <> ASA <> DHCP server 10.120.0.8 (10.120.0.x/23)

We test to put a static ip on 10.124.0.x subnet and we can successfully ping the 10.120.0.8 only we can't get any ip pool from the server.

show outputs:

KAO-ASA5505(config)# show run dhcprelay
dhcprelay server 10.120.0.8 outside
dhcprelay enable inside
dhcprelay setroute inside
dhcprelay timeout 60

KAO-ASA5505(config)# show dhcprelay state
Context  Configured as DHCP Relay
Interface inside, Configured for DHCP RELAY SERVER
Interface outside, Configured for DHCP RELAY

KAO-ASA5505(config)# show dhcprelay statistics
DHCP UDP Unreachable Errors: 0
DHCP Other UDP Errors: 0

Packets Relayed
BOOTREQUEST          0
DHCPDISCOVER         476
DHCPREQUEST          0
DHCPDECLINE          0
DHCPRELEASE          0
DHCPINFORM           0

BOOTREPLY            0
DHCPOFFER            0
DHCPACK              0
DHCPNAK              0

Thank you and have a great day!

[geloangelo00]

Site-to-Site VPN

KAO-ASA5505(config)# show crypto isakmp sa

   Active SA: 1
    Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 1

1   IKE Peer: 61.222.121.211
    Type    : L2L             Role    : initiator
    Rekey   : no              State   : MM_ACTIVE

KAO-ASA5505(config)# show crypto ipsec sa
interface: outside
    Crypto map tag: outside_map, seq num: 1, local addr: 59.125.150.50

      access-list L2L_VPN extended permit ip 10.124.0.0 255.255.254.0 10.120.0.0 255.255.254.0
      local ident (addr/mask/prot/port): (10.124.0.0/255.255.254.0/0/0)
      remote ident (addr/mask/prot/port): (10.120.0.0/255.255.254.0/0/0)
      current_peer: 61.222.121.211

      #pkts encaps: 20705, #pkts encrypt: 20792, #pkts digest: 20792
      #pkts decaps: 20718, #pkts decrypt: 20718, #pkts verify: 20718
      #pkts compressed: 0, #pkts decompressed: 0
      #pkts not compressed: 20705, #pkts comp failed: 0, #pkts decomp failed: 0
      #pre-frag successes: 87, #pre-frag failures: 0, #fragments created: 174
      #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
      #send errors: 0, #recv errors: 0

      local crypto endpt.: 59.125.150.50, remote crypto endpt.: 61.222.121.211

      path mtu 1500, ipsec overhead 58, media mtu 1500
      current outbound spi: 67E65A0B
      current inbound spi : 1403E50E