DHCP Relay

[isk-admin]

I have configured a VPN (site-to-site, PIX to Juniper) and I have to use the DHCP-Server in location A with the clients in location B. I configured

dhcprelay server 10.10.10.10 outside

dhcprelay enable inside

dhcprelay timeout 30

Now if I do ipconfig /renew at the client the vpn comes up but no more.

In debug mode I see

DHCPRA msg recieved, fip=0.0.0.0, fport=68

What?s going wrong?

With static IP I can ping the DHCP-Server.

regards

Helmut

[mheusinger]

Hello Helmut,

is the DHCP traffic also part of your VPN description, i.e. does the DHCP discover/request from the PIX arrive at the DHCP server and the DHCP offer/ack is sent across the VPN back to the PIX?

Can you ping the DHCP server from the PIX?

Might be a connectivity issue.

Regards, Martin

[isk-admin]

Hello Martin,

the DHCP request doesn?t arrive the server and the vpn-peer at the other side.

If the tunnel is down and I ping from a client with static ip-address the tunnel comes up and ping is ok, also from PIX.

Regards, Helmut